CVE-2022-23269: Microsoft Dynamics GP Spoofing Vulnerability

The CVSS Score says user action is required. What type of user action is required?

An authenticated user would have to visit a specific URL that will create an action for a workflow.