The vulnerability CVE-2025-49967 involves a CSRF issue in the Live Sports Streamthunder application by marcusjansen, affecting versions up to 2.1. CSRF vulnerabilities enable attackers to induce users to perform actions they did not intend by exploiting the user's authenticated session. The CVSS v3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, and user interaction required, resulting in low impact on integrity and no impact on confidentiality or availability. No patch or official remediation information is provided in the available data.

Successful exploitation could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially altering data or settings within the application. However, the impact is limited to integrity with no confidentiality or availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protection mechanisms such as anti-CSRF tokens or validating the origin of requests if possible. Monitor for vendor updates regarding patches or official mitigations.