Launchpad.net

CVE 2016-10766

edx-platform before 2016-06-06 allows CSRF.

See the CVE page on Mitre.org for more details.