WS-2016-7123

Vulnerability in the ownclod/core, CSRF token doesn't change after login. Any other user that uses the same workstation is vulnerable. A safer way would be to use a dynamic CSRF token or just change the token after login, so the attacker doesn't get hold of this...