GSA Bounty: CSRF in generating a new Personal Key

Hello team, I would like to report a CSRF which would allow an attacker to change a user's personal key. Vulnerable URL- staging.login.gov POC- Use the following HTML form for performing the CSRF attack- history.pushState'', '', '/' This will redirect you to...