Flask-MonitoringDashboard up to version 5.0.2 contains a cross-site request forgery (CSRF) vulnerability. This issue allows remote attackers to trick authenticated users into submitting unauthorized requests to the application. The vulnerability was reported early to the project but has not received a response or fix. The CVSS 4.0 base score is 5.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and limited impact on integrity.

Successful exploitation of this vulnerability could allow an attacker to induce authenticated users to perform unintended actions within the Flask-MonitoringDashboard application. The impact is limited to the scope of the affected functionality and does not include confidentiality or availability impacts according to the CVSS vector.

No official fix or patch is currently available for this vulnerability. Users should monitor the vendor's communications for updates. In the meantime, applying general CSRF mitigations such as implementing anti-CSRF tokens in the application or restricting access to trusted users may reduce risk, but these are not confirmed vendor recommendations.