CVE-2024-37235 is a CSRF vulnerability affecting the Groundhogg plugin by Adrian Tobey in versions up to 3.4.2.3. The vulnerability enables attackers to induce authenticated users to execute unwanted actions by leveraging the lack of proper request validation. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity with no confidentiality or availability impact.

The vulnerability could allow an attacker to cause limited integrity impact by making authenticated users perform unintended actions within the Groundhogg plugin. There is no direct confidentiality or availability impact reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's announcements for updates. Implementing standard CSRF protections or disabling the plugin until a fix is available may be considered as temporary measures.