This vulnerability in swedish boy Background Control (<= 1.0.5) enables Cross-Site Request Forgery (CSRF) attacks that also allow path traversal. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) indicates that the vulnerability is remotely exploitable without privileges or user interaction, causes a change in scope, and results in high impact on availability but no confidentiality or integrity impact. No official patch or vendor advisory is available to confirm remediation status.

The vulnerability can be exploited remotely without authentication or user interaction, potentially causing high availability impact on affected systems. There is no direct confidentiality or integrity impact reported. The path traversal aspect may allow unauthorized access to filesystem locations, but this is not explicitly detailed beyond the description.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider implementing CSRF protections such as verifying origin headers or using anti-CSRF tokens if possible within the application environment.