Coinbase: CSRF in function "Set as primary" on accounts page

I would like to report this CSRF vulnerability in coinbase on function "set as primary" for a account in accounts page. Steps: 1 Login to your coinbase account which atleast has two accounts 2 Go to "accounts" page and out of the two accounts click "set as primary" link for one of the accounts...