This vulnerability is a Cross-Site Request Forgery (CSRF) issue in TOCHAT.BE, a product by César Martín, affecting versions up to 1.3.4. CSRF vulnerabilities enable attackers to induce users to perform unwanted actions on a web application in which they are authenticated. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The impact is limited to integrity with no confidentiality or availability impact. There is no vendor advisory or patch information available in the provided data.

The vulnerability allows an attacker to cause an authenticated user to perform unintended actions, potentially altering data or application state (integrity impact). There is no impact on confidentiality or availability. The medium severity rating reflects the limited scope and requirement for user interaction. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other application-level mitigations if possible. Monitor official sources for updates or patches from César Martín regarding TOCHAT.BE.