Technical definition
Cross-site request forgery (CSRF)
An attack that tricks an authenticated browser into sending an unwanted state-changing request.
What It Means
CSRF exploits credentials a browser attaches automatically. SameSite cookies, anti-CSRF tokens, origin checks, and avoiding unsafe state changes through GET requests reduce the risk.