This vulnerability is a CSRF issue in Tumult Hype Animations versions up to 1.9.11. It allows an attacker to trick authenticated users into submitting unauthorized requests, potentially causing unintended actions within the application. The CVSS vector indicates it is remotely exploitable without privileges but requires user interaction. Confidentiality and availability impacts are not present, but integrity impact is low.

The impact is limited to low integrity compromise due to unauthorized actions performed by users without their intent. There is no direct confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply general CSRF mitigations such as validating request origins and using anti-CSRF tokens where possible.