Lucene search

K
osvGoogleOSV:CVE-2020-22784
HistoryApr 28, 2021 - 9:15 p.m.

CVE-2020-22784

2021-04-2821:15:08
Google
osv.dev
3
cve-2020-22784
etherpad ueberdb
mysql
bypass
access controls

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

35.9%

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB’s MySQL connector could allow bypassing access controls enforced on key names.

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

35.9%

Related for OSV:CVE-2020-22784