CVE-2023-39593

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges....

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami mariadb-min

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mysql-client

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mariadb

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Références

advisory nvd.nist.gov
advisory github.com
package github.com
web seclists.org