This vulnerability is a Cross-Site Request Forgery (CSRF) issue in SALESmanago & Leadoo products up to version 3.8.1. CSRF vulnerabilities enable attackers to induce authenticated users to perform unwanted actions without their consent. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity, with no confidentiality or availability impact noted. No patch or official remediation information is provided in the available data.

The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user, potentially altering data or settings (integrity impact). There is no impact on confidentiality or availability. No known exploits have been reported, and the attack requires user interaction, which limits the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens on sensitive requests if possible. Monitor vendor communications for updates regarding patches or official mitigations.