critical9.8
CVE-2020-35242
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.
Impact
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flamingo Project | Flamingo | through 2020-09-29 |