[Koha] CSRF issues

Hi guys, In a Security scan test, Koha appears with some issues related to CSRF attacks, we have 3.16 and we are trying with git-bz, but i dont know if that is the right way and how that versión is related with git-bz. Any clue? Thanks in advance, -LL