Here's the official blog: https://symfony.com/blog/cve-2022-23601-csrf-token-missing-i...