Bug - Cross Site Request Forgery (CSRF)

Summary - Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they are currently authenticated. CSRF attacks exploit the trust a Web application has in an authenticated user.

Steps To Reproduce :-
1. Login into two accounts in two browser.
2. Add some items in basket from one account, while adding intercept the GET request and search for engagement tools in burp proxy.
3. Generate a CSRF POC.
4. Open it in the other browser.
5. We can see some data in the tab. Refresh the other account page and we can see the items are added in that account as well.

Reference :-
1. https://hackerone.com/reports/834366
2. https://hackerone.com/reports/419891
3. https://hackerone.com/reports/152569