Shopify: CSRF token fixation in facebook store app that can lead to adding attacker to victim acc

hey guys i just found an csrf token fixation in facebook store app which is an offical shopify app link https://docs.shopify.com/manual/more/official-shopify-apps/facebook-store The CSRF bug which connects attacker's Facebook account to victim's shopify account. This is done by exploiting 'Connec...