Sabri Sogrid up to version 1.5.2 contains a CSRF vulnerability that enables attackers to escalate privileges by tricking authenticated users into executing unwanted actions. The vulnerability is remotely exploitable without privileges and requires user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this CSRF vulnerability can lead to unauthorized privilege escalation, compromising the confidentiality, integrity, and availability of the affected system. This could allow attackers to perform administrative actions without proper authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting actions to trusted origins where possible.