Cross-site Request Forgery (CSRF)

silverstripe/framework is vulnerable to Cross-site Request Forgery CSRF. The vulnerability is due to the improper handling of session tokens by the disableSecurityToken function within the LoginForm, which allows attackers to potentially fixate session tokens...