This vulnerability involves a CSRF weakness in Codemenschen Gift Vouchers software versions up to 4.4.0. CSRF vulnerabilities enable attackers to trick authenticated users into submitting unauthorized requests, potentially causing unintended actions. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No vendor advisory or patch information is currently provided, and the product is not a cloud service.

The vulnerability could allow an attacker to cause a user to perform unintended actions within the Gift Vouchers application, potentially altering data or state. The CVSS score of 4.3 reflects a medium severity with limited impact on integrity and no impact on confidentiality or availability. There are no known active exploits targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as anti-CSRF tokens or verifying the origin of requests if possible. Monitor vendor communications for updates on patches or official mitigations.