Browse / Cross-Site Request Forgery

Cross-Site Request Forgery

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Cross-Site Request Forgery (CSRF)530

Often found together with

• Cross-site Scripting148
• Authentication79
• Misconfiguration70
• Access Control61
• Information Disclosure61

Most upvoted Cross-Site Request Forgery reports

AllValidInformativeN/ADuplicate

1. Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.comDuplicateCross-Site Request Forgery (CSRF) · high · Ubiquiti Inc.
   55 votes
2. CSRF on https://www.niche.co leads to "account disconnection"DuplicateCross-Site Request Forgery (CSRF) · medium · X / xAI
   35 votes
3. CSRF to delete accounts [HtUS]DuplicateCross-Site Request Forgery (CSRF) · high · U.S. Dept Of Defense
   15 votes
4. Missing CSRF Token On Remove Coupun From CartDuplicateCross-Site Request Forgery (CSRF) · low · Starbucks
   10 votes
5. CSRF on delete friend requests - Not protected with CSRF TokenDuplicateCross-Site Request Forgery (CSRF) · XVIDEOS
   9 votes
6. Missing CSRF Token On Add Coupon To BasketDuplicateCross-Site Request Forgery (CSRF) · low · Starbucks
   8 votes
7. csrf blogs.starbucks.comDuplicateCross-Site Request Forgery (CSRF) · Starbucks
   5 votes
8. CSRF in generating a new Personal KeyDuplicateCross-Site Request Forgery (CSRF) · medium · GSA Bounty
   4 votes
9. Login Cross Site Request Forgery DuplicateCross-Site Request Forgery (CSRF) · Infogram
   3 votes
10. Csrf token does not meet security designDuplicateCross-Site Request Forgery (CSRF) · Liberapay
    1 votes
11. Logout CSRFDuplicateCross-Site Request Forgery (CSRF) · low · WakaTime