This vulnerability in reimund Compact Admin (versions <= 1.3.3) allows CSRF attacks, where an attacker can cause a logged-in user to perform unintended actions by exploiting the lack of proper request validation. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

The impact is limited to integrity as unauthorized actions could be performed by an authenticated user without their consent. There is no confidentiality or availability impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other request validation mechanisms if possible.