Security Advisory

CVE-2020-22784

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-28 20:22:44
Last updated 2024-08-04 14:51:11
Assigner mitre
State PUBLISHED

Description

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDBs MySQL connector could allow bypassing access controls enforced on key names.