CSRF Cross-Site Request Forgery

Cross-site request forgery (CSRF/XSRF), AKA one-click attack or session riding, is a malicious exploit of a website where unauthorized commands are submitted from a user that the web application trusts.

It causes data leakage, a change of session state, or manipulation of an end user’s account.

Defenses include header, form, or cookie data. It can be used to make unwanted purchases, causing users to distrust an organization.

Share