CVE-2026-3051: DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal
A vulnerability has been found in DataLinkDC dinky up to 1.2.5. The affected element is the function getProjectDir of the file dinky-admin/src/main/java/org/dinky/utils/GitRepository.java of the component Project Name Handler. Such manipulation of the argument projectName leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3051?
CVE-2026-3051 has been classified with a high severity due to the potential for path traversal attacks.
How do I fix CVE-2026-3051?
To mitigate CVE-2026-3051, upgrade the DataLinkDC dinky software to version 1.2.6 or later which addresses the vulnerability.
What does CVE-2026-3051 affect?
CVE-2026-3051 affects the function getProjectDir in the GitRepository.java file of the DataLinkDC dinky application.
Can CVE-2026-3051 allow unauthorized access?
Yes, CVE-2026-3051 can allow unauthorized access to sensitive files on the server through path traversal.
What versions are affected by CVE-2026-3051?
CVE-2026-3051 affects all versions of DataLinkDC dinky up to and including 1.2.5.