3 matches found
BIT-MYSQL-CLIENT-2023-39593
Insecure permissions in the sysexec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...
ROS-20250326-05
A vulnerability in the sysexec function of MariaDB software is related to insecure permissions. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands with elevated privileges...
CVE-2023-39593
CVE-2023-39593 concerns Insecure permissions in the sys_exec function of MariaDB v10.5. The connected documents consistently describe that authenticated attackers could execute arbitrary commands with elevated privileges, though the MariaDB Foundation disputes that any privilege boundary is cross...