This vulnerability is a CSRF issue in ActiveDEMAND by JumpDEMAND Inc., affecting versions through 0.2.43. CSRF vulnerabilities enable attackers to trick authenticated users into submitting unauthorized requests to the application, potentially causing unintended actions. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

The vulnerability could allow an attacker to cause a user to perform unintended actions within ActiveDEMAND, potentially altering data or settings without the user's consent. There is no impact on confidentiality or availability according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. In the meantime, applying standard CSRF protections such as validating anti-CSRF tokens and ensuring user interaction for sensitive actions may reduce risk.