Cross-Site Request Forgery

Named by 5 kept items in this workspace.

Search every workspace for Cross-Site Request Forgery. It matches the name as written, so it can find other things that share it.

The items that name it 5

Putting models to the secure coding test: Security rules
writeup2026-10-19It is written here as Cross-site request forgery (CSRF).
Vulnerability in GPT 5.5 default upload handling; no CSRF check on Sonnet 5 token refresh endpoint
https://github.com/akha-security/akca
repo2026-09-23It is written here as Cross-Site Request Forgery (CSRF).
CSRF
Static Analysis Tools & Linters
repo2026-08-09It is written here as Cross-site request forgery (CSRF).
CSRF
Alice and Bob Learn Secure Coding: Chapter 2
video2026-05-11It is written here as Cross-Site Request Forgery (CWE-352).
CWE-352
CVE-2026-15988 | INCIBE-CERT | INCIBE
advisoryIt is written here as Cross-Site Request Forgery (CSRF).
Missing or incorrect nonce validation on the reauth_for_authorize function allows unauthenticated attackers to create new administrator accounts with attacker-supplied credentials via a CSRF-based REST authentication bypass, requiring a site administrator to click a link

All techniques in this workspace.