VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)CreditsGuy HayouReferenceshttps://www.gov.il/en/Departments/faq/cve_advisories