Cross Site Request Forgery (CSRF)

shopware/shopware is vulnerable to cross-site request forgery. The vulnerability exists in CSRFTokenValidator.php due to the lack of validation in csrf token which allows an attacker to make changes to the system as a legitimate user...