Flamingo Project Flamingo — known CVE vulnerabilities

Every CVE whose affected-product data names Flamingo Project Flamingo, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-35242 — CVSS 9.8 (critical): Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.
• CVE-2020-35243 — CVSS 9.8 (critical): Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.
• CVE-2020-35244 — CVSS 9.8 (critical): Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.
• CVE-2020-35245 — CVSS 9.8 (critical): Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.