MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor privileges. A low-privileged attacker who can name another account can exploit this authorization error to set that account's password. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

mariadb: mariadb: out-of-bounds read in ST_Area with crafted MULTIPOLYGON mariadb: MariaDB: Unauthorized file access via CONNECT engine functions mariadb: mariadb: SQL injection via improper identifier quoting mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement mariadb: mariadb: Arbitrary code execution via insecure service account home directory mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin mariadb: mariadb: Privilege escalation via environment variable injection during service restart mariadb: mariadb: Arbitrary code execution via crafted FRM metadata mariadb: MariaDB: Privilege escalation via ACL cache key collision mariadb: mariadb: Privilege escalation via unescaped newlines in view parser