This vulnerability in reimund Compact Admin (<= 1.3.3) is a Cross-Site Request Forgery (CSRF) issue, where an attacker can cause an authenticated user to perform unintended actions without their consent. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact. No patch or official fix information is provided in the available data.

The vulnerability allows an attacker to induce an authenticated user to perform unauthorized actions, potentially modifying data or settings within the application. There is no impact on confidentiality or availability. The overall severity is medium based on the CVSS score of 4.3. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other application-level mitigations if possible. Monitor vendor channels for updates regarding patches or official fixes.