Skip to content

Cross-Site Request Forgery (CSRF)

What is Cross-Site Request Forgery (CSRF)?

A web application vulnerability that tricks an authenticated user into submitting unintended requests to a web application. CSRF attacks exploit the trust that a site has in the user's browser.

Information Security

Frameworks that govern cross-site request forgery (csrf)

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on cross-site request forgery (csrf)

Requirements naming cross-site request forgery (csrf) across this standard, quoted from the control text.

CWE Top 25 Most Dangerous Software Weaknesses (2024)1 control

Rank 4 in the 2024 CWE Top 25 (frequency x severity of CVEs). The web application does not verify that a state-changing request was intentionally sent by the user, allowing an attacker to force the victim's browser to submit requests.

CWE-352 · Cross-Site Request Forgery (CSRF) →

Questions people ask about cross-site request forgery (csrf)

What is Cross-Site Request Forgery (CSRF)?
A web application vulnerability that tricks an authenticated user into submitting unintended requests to a web application. CSRF attacks exploit the trust that a site has in the user's browser.
Why is Cross-Site Request Forgery (CSRF) important for compliance?
Cross-Site Request Forgery (CSRF) is a key concept in Information Security. Understanding cross-site request forgery (csrf) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) appears in the requirement text of CWE Top 25 Most Dangerous Software Weaknesses (2024). Across these standards we have identified 1 control that names it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cross-Site Request Forgery (CSRF)?
Explore our compliance framework pages to see how cross-site request forgery (csrf) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Cross-Site Request Forgery (CSRF) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.