Vendor
A server-side request forgery vulnerability in DataLinkDC Dinky (<= 1.2.5) allows remote attackers to manipulate the _authority argument to trigger unauthorized requests from the server.