This vulnerability is a CWE-352 Cross-Site Request Forgery issue in the ReDi Restaurant Reservation product by Reservation Diary. It affects versions up to 24.0128 and allows attackers to trick authenticated users into submitting unauthorized requests. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or official remediation has been published yet, and the product is not a cloud service, so remediation depends on vendor updates.

An attacker could exploit this CSRF vulnerability to cause authenticated users to perform unintended actions that may alter data integrity within the ReDi Restaurant Reservation system. There is no impact on confidentiality or availability. The overall impact is limited to low integrity loss, consistent with the medium severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens and restricting unsafe HTTP methods if possible. Monitor vendor communications for updates. No vendor advisory or official fix is currently available.