CVE-2020-35242

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.

Date published : 2020-12-26

https://github.com/balloonwj/flamingo/issues/47