CVE-2020-35242

Flamingo (aka FlamingoIM) prior to 2020-09-29 contains a SQL injection in UserManager::updateUserTeamInfoInDbAndMemory. The CVE entry lists impacted product as Flamingo/FlamingoIM with a vulnerability that enables database/memory info manipulation via user-team info updates. From the initial data...