This vulnerability in Brainstorm Force Sigmize (<= 0.0.9) allows Cross-Site Request Forgery (CSRF) attacks, where an attacker can induce an authenticated user to perform unwanted actions without their consent. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, user interaction needed, and limited impact on integrity but no impact on confidentiality or availability. No patch or official fix information is currently available.

The impact is limited to potential unauthorized actions performed via CSRF, which may alter data integrity but does not affect confidentiality or availability. The medium severity score reflects this limited impact. No known exploitation has been reported, so the immediate risk appears low but could increase if exploits emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying origin headers, using anti-CSRF tokens, or restricting actions to POST requests with proper validation. Monitor official Brainstorm Force communications for updates.