This vulnerability in Wallos v4.1.1 involves a CSRF flaw in the /endpoints/currency/currency endpoint. An attacker can exploit this by sending a specially crafted GET request that triggers unauthorized operations on behalf of an authenticated user. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no known exploits have been reported in the wild.

Successful exploitation can lead to unauthorized execution of operations affecting confidentiality, integrity, and availability of the affected system. Since no privileges or user interaction are required, the vulnerability poses a significant risk to affected installations of Wallos 4.1.1.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens on the affected endpoint or restricting access to trusted sources. Monitor vendor channels for updates.