Skip to content

Cross-Site Request Forgery

What is Cross-Site Request Forgery?

A web security vulnerability that tricks authenticated users into submitting unintended requests to a web application, potentially performing unauthorized actions.

Information Security

Frameworks that govern cross-site request forgery

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on cross-site request forgery

Requirements naming cross-site request forgery across this standard, quoted from the control text.

CWE Top 25 Most Dangerous Software Weaknesses (2024)1 control

Rank 4 in the 2024 CWE Top 25 (frequency x severity of CVEs). The web application does not verify that a state-changing request was intentionally sent by the user, allowing an attacker to force the victim's browser to submit requests.

CWE-352 · Cross-Site Request Forgery (CSRF) →

Questions people ask about cross-site request forgery

What is Cross-Site Request Forgery?
A web security vulnerability that tricks authenticated users into submitting unintended requests to a web application, potentially performing unauthorized actions.
Why is Cross-Site Request Forgery important for compliance?
Cross-Site Request Forgery is a key concept in Information Security. Understanding cross-site request forgery helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Cross-Site Request Forgery?
Cross-Site Request Forgery appears in the requirement text of CWE Top 25 Most Dangerous Software Weaknesses (2024). Across these standards we have identified 1 control that names it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cross-Site Request Forgery?
Explore our compliance framework pages to see how cross-site request forgery applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Cross-Site Request Forgery applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.