Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated.

Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf[1]) or XSRF, is a type of malicious exploit of a website or web …

Cross-site request forgery (CSRF) is a silent threat that exploits trusted sessions to trigger unauthorized actions. Learn how to detect, prevent, and respond.

What is cross-site request forgery (CSRF)? CSRF is a cyber attack that tricks a user into using their credentials to perform unintended actions on a web application where they are authenticated.

2025年12月29日 · What is CSRF? Cross-site request forgery (CSRF) is a cybersecurity attack where a malicious website or attacker tricks your browser into making unwanted requests to an authenticated …

2025年4月27日 · Cross-site request forgery (CSRF), also known as session riding or one-click attack, takes advantage of the user’s browser’s trust in a web application. When a user is authenticated on a …

2022年4月4日 · Cross-Site Request Forgery (CSRF), also known as XSRF, Session Riding, or one-click attacks, is a web security vulnerability that tricks a web browser into executing an unwanted action …

2025年10月17日 · In a cross-site request forgery (CSRF) attack, an attacker tricks the user or the browser into making an HTTP request to the target site from a malicious site. The request includes …

2025年10月28日 · Cross site request forgery (CSRF), also known as XSRF, Sea Surf or Session Riding, is an attack vector that tricks a web browser into executing an unwanted action in an application to …

CSRF or Cross-Site Request Forgery is an attack on a web application by end-users that have already granted them authentication. Learn how it works, and how hackers construct a CSRF attack.