This vulnerability in Posti Shipping (<= 3.10.3) is a Cross-Site Request Forgery (CSRF) issue that allows attackers to trick authenticated users into submitting unwanted requests to the application. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No patch or mitigation details are provided in the available data.

An attacker exploiting this CSRF vulnerability could cause unauthorized actions that impact the integrity and availability of the Posti Shipping application. There is no confidentiality impact. The medium severity score reflects the potential for disruption or manipulation of application functions without user consent. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF protections such as verifying anti-CSRF tokens or restricting state-changing requests to POST methods with proper validation. Monitor vendor communications for updates on patches or official mitigations.