MariaDB server ALTER TABLE CONVERT PARTITION authorization bypass exposes unauthorized tables
Database users can peek at or change tables they should not reach.
Summary
The ALTER TABLE ... CONVERT ... PARTITION statement in MariaDB server does not apply filename encoding to user-specified partition names before building file paths. An authenticated database user can read or modify table files they are not authorized to access, in multiple version lines starting from 10.11.1.
Affected when
- Authenticated database user account
What to do
Update to the fixed version for your branch: 10.11.19, 11.4.13, 11.8.9, 12.3.3, or 13.0.2.
Update to at least the version for your product:
- MariaDB 10.11 10.11.19 or later
- MariaDB 11.4 11.4.13 or later
- MariaDB 11.8 11.8.9 or later
- MariaDB 12.3 12.3.3 or later
- MariaDB 13.0 13.0.2 or later
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen