🎯 New Report #3849025: DATA / INDEX DIRECTORY Abuse
🔺Severity: null
👽 Reporter: vortfu
⭐️ Reputation: 519
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-07
⏰ Disclosed: 2026-10-07 19:53:07
📝 Summary: A vulnerability was identified in the DATA DIRECTORY and INDEX DIRECTORY functionality of a database system. Users with ordinary schema-level privileges were able to write arbitrary data to attacker-chosen locations by exploiting path traversal issues in how external table directories were processed. The vulnerability occurred because directory traversal checks failed when target paths contained non-existent segments, and because filename length limitations could be bypassed to create table files with arbitrary extensions in unintended locations. Additionally, a separate issue was identified in the ARCHIVE storage engine that allowed existing files to be overwritten when creating tables with specially crafted data directory paths.
📂 Report JSON File: 3849025
@hackeronereports