GHSA-x4hx-f425-mrx6: DataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side request forgery
A vulnerability has been found in DataLinkDC Dinky up to 1.2.5. The impacted element is the function SqlGateway.onOpen of the file SqlGateway.java of the component sql-gateway Endpoint. Such manipulation of the argument connectAddress leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The researcher claims to have submitted a GHSA on the repository of the project.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
DataLinkDC Dinky versions up to and including 1.2.5 are affected in the sql-gateway endpoint, specifically SqlGateway.onOpen in SqlGateway.java.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.
What does an attacker need to control?
An attacker needs to manipulate the connectAddress argument handled by SqlGateway.onOpen. This can cause the server to make requests selected by the attacker.
Is public exploit information available?
Yes. The vulnerability description states that an exploit has been publicly disclosed and may be used.