Post #4330226

A researcher has demonstrated what appears to be an authenticated RCE against MariaDB 13.0.1-rc. The public video shows successful code execution as the mysql service account, but the underlying vulnerability, affected code path, and exploit technique remain undisclosed. I analyzed the demonstration and separated confirmed observations from speculation. https://thecybersecguru.com/exploits/mariadb-13-0-1-rc-authenticated-rce-analysis/ #MariaDB #DatabaseSecurity #Linux #CyberSecurity #RCE #Caturday #Infosec