CSRF in Gadu-Gadu Instant Messenger

CVE-2007-6410

Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.004 (35.4th percentile) — read the EPSS interpretation.