Security Advisory

CVE-2020-22784

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-28 20:22:44
Last updated 2024-08-04 14:51:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names.