This vulnerability is a CSRF issue in VOD Infomaniak (versions <= 1.5.7) that could allow attackers to perform unauthorized actions on behalf of authenticated users. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity and availability, with no confidentiality impact reported. No patch or mitigation details have been provided by the vendor or in public advisories.

An attacker could exploit this CSRF vulnerability to cause limited integrity and availability impacts by inducing authenticated users to perform unintended actions. There is no indication of confidentiality compromise. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other application-level mitigations if possible.