CVE-2025-13699

Vulnerability

Details

The vulnerability resides in the mariadb-dump utility, specifically in how it handles view names during file operations. The flaw is a directory traversal issue caused by the lack of proper validation of user-supplied paths before using paths. This allows an attacker to manipulate file paths, potentially leading to arbitrary file writes or reads [1].

Exploitation

Exploitation requires user interaction with the mariadb-dump utility, though attack vectors may vary depending on the implementation. An attacker could craft a malicious database view name that, when processed by mariadb-dump, triggers a path traversal. This could be achieved by enticing a user to run mariadb-dump on a database containing such a view, or through other means that involve the utility processing untrusted input [1].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current user. This could lead to unauthorized access, data exfiltration, or further compromise of the system [1].

Mitigation

The issue is tracked as MDEV-37483 and has been addressed in MariaDB versions 10.6, 10.11, 11.4, and 11.8. Users are advised to update to the latest patched versions to mitigate the risk [2].