ID: 11085
Title: Icon upload: Add missing transaction validation
Component: WATO
Level: 1
Class: Security fix
Version: 1.7.0i1
The transaction IDs (CSRF tokens) were not validated while processing the upload of
icons.
This alone is not a security hole, rather a lack of validation of this call.