BIT-MYSQL-CLIENT-2023-39593

Insecure permissions in the sysexec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...

ROS-20250326-05

A vulnerability in the sysexec function of MariaDB software is related to insecure permissions. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands with elevated privileges...

CVE-2023-39593

MariaDB version 10.5 is vulnerable to a code injection flaw due to insecure permissions in the sys_exec function. This allows authenticated attackers to execute arbitrary commands with elevated privileges. While the MariaDB Foundation disputes the severity because no privilege boundary is crossed...