Cross-site request forgery vulnerability on a DoD website

Summary

A cross-site request forgery vulnerability was found on a Department of Defense website which could trick a web user into posting or changing confidential information, or redirecting sensitive information to the malicious user. @korprit was able to demonstrate this vulnerability by crafting a specially formatted webpage. Thanks @korprit!