mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.
- https://www.exploit-db.com/exploits/42004/
No PoCs found on GitHub currently.