Mail.ru: CSRF on api.my.games due to improper validation of token allows an attacker to delete other users notifications

CSRF vulnerability in api.my.games allowed to delete users notifications with crossite request...

Mail.ru: Cross-Site Request Forgery (CSRF) in comment update - api.my.games

CSRF vulnerability in api.my.games allowed to update store.my.gamesb log comment with crossite request...