Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39289

CONNECT REST support on Windows doesn't escape the url

    XMLWordPrintable

Details

    • Can result in unexpected behaviour
    • Q2/2026 Server Maintenance

    Description

      	sprintf(cmd, "curl \"%s\" -o \"%s\"", buf, filename);
      		 
      	if (CreateProcess(NULL, cmd, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi)) {

      Reported by Aisle Research

      Attachments

        Issue Links

          links to

          Web Link CVE-2026-44170

          Activity

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Sergei Golubchik Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.