Flamingo ProjectCVEs & Vulnerabilities
4 CVEs affecting Flamingo Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
4 CVEs→ All vendors
Most Affected Products
flamingo 4
CVE-2020-35245CRITICAL
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.
26 Dec 2020
9.8
CVSS
CVE-2020-35244CRITICAL
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.
26 Dec 2020
9.8
CVSS
CVE-2020-35243CRITICAL
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.
26 Dec 2020
9.8
CVSS
CVE-2020-35242CRITICAL
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.
26 Dec 2020
9.8
CVSS
← PrevPage 1 / 1Next →