CoreCVE
Back

HIGH

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names

Published Apr 28, 2021

Description

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-697

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 28, 2021
Updated Aug 4, 2024
Reserved Aug 13, 2020
Link CVE-2020-22784
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-22784
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-22784