Cross-Site Request Forgery in GitHub repository pkp/pkp-lib before 3.3.0-16.
sfu pkp web application library