Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.

Published Dec 26, 2020 · Updated Aug 4, 2024 · Assigned by mitre