SecurityIntermediate

Cross-site request forgery

Also known as CSRF

An attack that causes a browser to send an unwanted request using a victim's credentials.

In the real world

A malicious page attempts a state-changing request to a site where you are logged in.

Related

Go a little deeper