Unrated severityNVD Advisory· Published Oct 17, 2024· Updated Oct 20, 2024
CVE-2023-39593
CVE-2023-39593
Description
Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.
Affected products
4- MariaDB/MariaDBdescription
- osv-coords3 versions
>= 10.5.0, <= 10.5.0+ 2 more
- (no CPE)range: >= 10.5.0, <= 10.5.0
- (no CPE)range: >= 10.5.0, <= 10.5.0
- (no CPE)range: >= 10.5.0, <= 10.5.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.