[MEDIUM] Missing state parameter in OAuth requests leading to CSRF vulnerability

PKSA-676z-vx4z-rf2s GHSA-6wqp-7g94-f69j

Affected version: <4.2.3

Reported by:
GitHub, FriendsOfPHP/security-advisories