The vulnerability CVE-2024-54396 is a Cross-Site Request Forgery (CSRF) issue in the elmervillanueva Bet sport Free product affecting versions up to 1.0.0. CSRF vulnerabilities enable attackers to induce users to perform actions they did not intend by exploiting the user's authenticated session. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction, with no confidentiality or integrity impact and low availability impact.

An attacker could potentially cause an authenticated user to execute unwanted actions within the Bet sport Free application, potentially leading to limited disruption of service (availability impact). There is no impact on confidentiality or integrity according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or verifying the origin of requests if possible. Monitor for updates from the vendor elmervillanueva regarding official remediation.