This vulnerability in Yummly Rich Recipes (<= 4.2) is a CSRF issue where the application does not adequately verify the origin of requests, allowing attackers to induce authenticated users to perform actions without their consent. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official fix information is available at this time.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within Yummly Rich Recipes, potentially leading to limited integrity impact. There is no confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting state-changing requests to trusted origins if possible.