Cross-Site Request Forgery (CSRF)

grumpydictator/firefly-iii is vulnerable to cross-site request forgery. An attacker can duplicate rules and modify the order of rule groups through the duplicate function in CreateController.php...