CVE-2023-52970

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

Scoring

Severity

MEDIUM

CVSS base score

4.9

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS probability

0.21%

CWE

CWE-1038

Published

2025-03-08

Last modified

2026-03-13

Affected products

• MariaDB MariaDB
• MariaDB MariaDB
• MariaDB MariaDB
• MariaDB MariaDB
• MariaDB MariaDB

Weakness type

• CWE-1038

Related vulnerabilities

• CVE-2025-48877 — Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe
• CVE-2023-52971 — MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in...
• CVE-2023-52969 — MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through...
• CVE-2022-31220 — Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated...
• CVE-2022-26861 — Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated...

Markdown version · Browse all CVEs