CVE-2024-51669 is a CSRF vulnerability in Kalmang Dynamic Widgets versions up to 1.6.4. CSRF vulnerabilities enable attackers to trick authenticated users into submitting unwanted requests to the affected application, potentially causing unintended state changes. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting a network attack vector with low complexity and requiring user interaction. No patch or official remediation information is provided in the available data, and no exploits are currently known. The vulnerability affects the integrity of the application by allowing unauthorized actions but does not affect confidentiality or availability.

The impact of this vulnerability is limited to potential unauthorized actions performed via CSRF attacks, which can affect the integrity of the application state. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild, and the severity is rated medium based on the CVSS score of 4.3.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens on state-changing requests and enforcing same-site cookie attributes if applicable. Monitor vendor channels for updates regarding patches or official fixes.