CSRF (Cross-Site Request Forgery)
An attack that tricks authenticated users into submitting unwanted requests to a web application they are logged into.
CSRF (Cross-Site Request Forgery) - An attack that tricks authenticated users into submitting unwanted requests to a web application they are logged into.
CSRF exploits the trust a website has in a user's browser. An attacker creates a page with a hidden form that submits to the target site. If the user is logged in, the browser sends their cookies, and the request succeeds.
Prevention includes CSRF tokens (unique per-session tokens in forms), SameSite cookie attribute, checking the Referer/Origin header, and requiring re-authentication for sensitive actions.
Learn more: Full glossary entry →
Related Resources
Debian Security and Hardening
Related eBook - Learn more in depth
Linux Security Audit Checklist PDF
Free Cheatsheet - Download PDF
Sudoers Security Audit: Finding NOPASSWD Entries and Privilege Escalation Risks
Blog Post - Deep dive article