Description
In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names.
Unscored
CVE-2020-22784
EUVD-2020-15541GHSA-5qr5-m9m2-vfx5
In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database record…
Published Apr 28, 2021 · Updated Aug 4, 2024 · Assigned by mitre