VULNERABILITY INTELLIGENCE
CVE-2007-6410
CVSS score4.3 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2007-12-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)