critical9.8
CVE-2020-35244
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.
Impact
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flamingo Project | Flamingo | through 2020-09-29 |