CSRF on https://www.niche.co leads to "account disconnection"

Summary

The researcher discovered that Niche’s CSRF protection was broken and that an attacker could trick a logged-in user into deleting existing network connections under the network/ endpoint.