CVE-2023-39593

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges....

Original description

The description as published by the source.

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami mariadb-min

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mysql-client

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mariadb

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

References

advisory nvd.nist.gov
advisory github.com
package github.com
web seclists.org