This vulnerability, identified as CWE-352, exists in TMS Amelia versions up to 1.0.95 and involves Cross-Site Request Forgery (CSRF). CSRF vulnerabilities enable attackers to trick authenticated users into submitting unauthorized requests to the web application, potentially causing unintended actions. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity and availability with no confidentiality impact. No patch or official remediation level has been disclosed by the vendor, and no exploits are known in the wild.

The impact of this vulnerability is limited to potential unauthorized actions performed on behalf of authenticated users, affecting the integrity and availability of the application. There is no confidentiality impact reported. Since no known exploits are in the wild, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying the origin of requests, using anti-CSRF tokens, or restricting sensitive actions to POST requests with proper validation. Monitor vendor communications for updates on patches or official mitigations.