This vulnerability in opicron Image Cleanup (<= 1.9.2) is a Cross-Site Request Forgery (CSRF) issue, where the application does not adequately verify the origin of requests, allowing attackers to induce authenticated users to execute unintended actions. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to a low integrity effect with no confidentiality or availability impact.

The vulnerability could allow an attacker to cause an authenticated user to perform actions without their consent, potentially altering data or application state with low integrity impact. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins where possible. Monitor vendor communications for official fixes.