Cross-Site Request Forgery

With CSRF an attacker makes a signed-in user's browser silently trigger an action in another web application, such as a transfer or a password change. The application considers the request genuine because it carries the user's valid session. Anti-CSRF tokens and SameSite cookies provide protection.