Cross Site Request Forgery (CSRF)

A CSRF, or XSRF attack happens when a malicious website tricks a logged-in user’s browser into sending an unwanted request to another application. CSRF requires both an intermediate website and a victim website.

CSRF is often confused with SSRF, the server-side request forgery, but the two are distinct: CSRF forges a request from the victim’s browser, while SSRF forges a request from the server itself.

Documentation

See also CSRF vs XSS: What are their similarity and differences and Cross Site Request Forgery (CSRF).

Related : Cross Site Scripting (XSS), Server-Side Request Forgery (SSRF), Nonce, hash_equals(), Static Application Security Testing (SAST), Session Hijacking, Vulnerability