Glossary: Application and Credential Attacks, and AI Risks

cross-site request forgery (CSRF)

Also written: CSRF

Tricking a signed-in user's browser into sending a request the attacker wrote to a site where the user is signed in. The browser adds the user's cookie automatically, as when Jo opened a forum page and the shop's admin email was changed.