CVE-2023-26785

MariaDB v10.5 was discovered to contain a remote code execution RCE vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...

CVE-2023-26785

CVE-2023-26785 affects MariaDB v10.5 and describes a remote code execution vulnerability that arises when a user can load a UDF from a Shared Object File and issue a CREATE FUNCTION statement. The description notes that the MariaDB Foundation disputes a privilege boundary being crossed. Several c...

CVE-2023-39593

CVE-2023-39593 concerns Insecure permissions in the sys_exec function of MariaDB v10.5. The connected documents consistently describe that authenticated attackers could execute arbitrary commands with elevated privileges, though the MariaDB Foundation disputes that any privilege boundary is cross...