This vulnerability is a CSRF issue in Cliengo – Chatbot versions up to 3.0.4. It allows attackers to induce authenticated users to perform unintended actions without their consent. The CVSS vector indicates the attack can be performed remotely over the network with low complexity, requires no privileges but does require user interaction. The impact affects integrity and availability but not confidentiality. There is no available patch or vendor advisory detailing remediation at this time.

An attacker could exploit this CSRF vulnerability to cause limited integrity and availability impacts by tricking authenticated users into executing unwanted actions. Confidentiality is not affected. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins where possible.