critical9.8
CVE-2020-35243
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.
Impact
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flamingo Project | Flamingo | through 2020-09-29 |