CVE-2023-39593

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges....

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami mariadb-min

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mysql-client

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mariadb

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

参照URL

advisory github.com
web nvd.nist.gov
web seclists.org