Etherpad

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Etherpad records in CISA KEV

No Etherpad vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Etherpad 16 records MEDIUM Etherpad Lite 2 records MEDIUM Ueberdb 1 record LOW

Records

1 record in Ueberdb · all components

TI-2020-14395 CVE-2020-22784 · GHSA-5qr5-m9m2-vfx5

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar…

LOW 35

In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01044 Published 2021-04-28 No fix listed CWE-697

Open these records in search →

Critical	4
High	11
Medium	4
Low	0
No CVSS	0