Contao 4.7 allows CSRF.Referenceshttps://contao.org/en/news.htmlhttps://contao.org/en/news/security-vulnerability-cve-2019-10642.html