Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

It is not clear that this is a legitimate issue affecting MariaDB. The MariaDB Foundation disputes this CVE because it argues that no privilege boundary is crossed. Additionally, the impact of fixing this issue would greatly affect workflows that use User Defined Functions (UDF). Considering the tradeoff between the stability of Amazon Linux and the potential impact of CVE-2023-39593, a fix will not be provided for mariadb at this time.