Vulnerability Details CVE-2007-6410
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.3%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2007-6410
-
cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:*