Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39289

CONNECT REST support on Windows doesn't escape the url

    XMLWordPrintable

Details

    • Not for ES Release Notes
    • Q2/2026 Server Maintenance

    Description

      	sprintf(cmd, "curl \"%s\" -o \"%s\"", buf, filename);
      		 
      	if (CreateProcess(NULL, cmd, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi)) {

      Reported by Aisle Research

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-30432 Refactor connect to use libcurl instead of cpprestsdk/curl

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • In Review
          links to

          Web Link CVE-2026-44170

          Activity

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Sergei Golubchik Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0d
                  0d
                  Remaining:
                  Remaining Estimate - 0d
                  0d
                  Logged:
                  Time Spent - 3h
                  3h

                  Git Integration

                    Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.