Cross Site Request Forgery

Cross-Site Request Forgery (CSRF) is an attack in which an attacker tricks an authenticated user into performing unwanted actions on a website where they are already logged in. The browser automatically includes the user’s session information, making the request appear legitimate. This can result in actions such as changing settings or performing transactions without the user’s consent.