PT-2025-48274 · Mariadb+6 · Mariadb+7
Sergei Golubchik
·
Published
2025-01-01
·
Updated
2026-05-22
·
CVE-2025-13699
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
MariaDB versions prior to 10.5
MariaDB mariadb-dump Utility (affected versions not specified)
Description
The mariadb-dump utility contains a directory traversal flaw that could lead to remote code execution. The utility does not properly sanitize user-supplied input, allowing an attacker to potentially access and manipulate files outside the intended directory. This could allow an attacker to execute arbitrary code on the system.
Recommendations
Update MariaDB to version 10.5 or later.
Fix
RCE
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Mariadb
Red Hat
Red Os
Rocky Linux
Mariadb-Dump