This vulnerability is classified as CWE-352, Cross-Site Request Forgery, in the Marsian i-transform product. It affects versions up to 3.0.9 and allows attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or official fix has been documented, and the product is not a cloud service, so remediation depends on vendor updates.

An attacker could exploit this vulnerability to cause an authenticated user to execute unintended commands or actions within the i-transform application, potentially leading to low integrity impact. There is no confidentiality or availability impact reported. The vulnerability requires user interaction and can be exploited remotely without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens on sensitive requests or restricting actions to trusted origins if possible. Monitor vendor communications for updates on patches or official mitigations.