← All advisories

Critical severity9.8NVD Advisory· Published Dec 26, 2020· Updated Jun 17, 2026

CVE-2020-35242

CVE-2020-35242

Description

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Flamingo/Flamingodescription
balloonwj/Flamingollm-fuzzy
Range: <=2020-09-29

Patches

Vulnerability mechanics

References

1

github.com/balloonwj/flamingo/issues/47nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.