CVE-2020-35242

9.8

CRITICALCVSS v3

Published

December 26, 2020

CVSS v2

7.5 HIGH

Affected

0 projects

Assigned by

MITRE

Severity scale

010

Description

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.

flamingo_project / flamingo

cpe:2.3:a:flamingo_project:flamingo:*:*:*:*:*:*:*:*

<= 2020-09-29