Vulnerabilities

TI-2020-17919 CVE-2020-35245 · GHSA-37cg-6ww4-3f68

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89

TI-2020-17918 CVE-2020-35244 · GHSA-mp76-8wmf-mx7x

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89

TI-2020-17917 CVE-2020-35243 · GHSA-fwm5-6cq3-ch4p

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89

TI-2020-17916 CVE-2020-35242 · GHSA-q6w2-7x26-wjhf

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89