CVE-2007-6410: Gadu-Gadu Instant Messenger

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.

Affected products

• Gadu-Gadu Gadu-Gadu Instant Messenger: any version

Published 2007-12-17. Last modified 2026-06-16.