Cross-Site Request Forgery (CSRF)
← Back to Common Vulnerabilities
An attack where a malicious site tricks a user’s browser into making authenticated requests to a target site. The browser automatically includes cookies, making the forged request appear legitimate. Mitigations: CSRF tokens, SameSite cookie attribute, and checking Origin/Referer headers.