ether/ueberDB

Releases278

Frequency1 week 4 hours

Last Release 9 days ago

Stars268

Abstract your databases, make datababies. Transforms every database into a object key value store.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-22784 ↗	Apr 28, 2021Wednesday, 28 April 2021, 21:15	7.5 HIGH	5 MEDIUM
In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names.