CVE-2020-35243

Published December 26th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.

balloonwj/flamingo

flamingo 一款高性能轻量级开源即时通讯软件

GitHub

3.95K