Which type of OWASP threat forges a malicious HTTP request into an application?
Cross-Site Request Forgery (CSRF) is a type of attack that forges a malicious HTTP request and sends it from a user's browser to a different site where the user is authenticated. The attacker tricks the user into executing unwanted actions on a web application in which the user is currently authenticated. This can lead to unauthorized actions being performed on the user's behalf.
Cisco DevNet Associate Certification Guide
OWASP CSRF Prevention Cheat Sheet
Currently there are no comments in this discussion, be the first to comment!