Cross-site request forgery (CSRF) vulnerability in a DoD website

Summary

A cross-site request forgery (CSRF) vulnerability was found on a Department of Defense website which could trick a web user into posting or changing confidential information, or redirecting sensitive information to the malicious user. @mantis was able to demonstrate this vulnerability by crafting a specially formatted webpage. Thanks @mantis!