CVE-2026-124326

A path traversal vulnerability exists in DataLinkDC Dinky up to version 1.2.5 . The flaw is located in the file.getOriginalFilename function within CatalogueController.java , specifically affecting the Catalogue Upload component. By manipulating the filename argument, an attacker can achieve a pa...