Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3c4c-32w8-h6cj

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.

Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.

EPSS

Процентиль: 32%
0.00124
Низкий

Дефекты

CWE-352

Связанные уязвимости

nvd
около 18 лет назад

Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.

EPSS

Процентиль: 32%
0.00124
Низкий

Дефекты

CWE-352