CVE-2020-22784
High
Description
In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Etherpad Ueberdb
PublishedApr 28, 2021
First seenApr 28, 2021
How to fix
Update
- etherpad ueberdb1.4.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| etherpad ueberdb | v < 1.4.8 | 1.4.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.