Browse / Cross-Site Request Forgery

Cross-Site Request Forgery

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Cross-Site Request Forgery (CSRF)530

Often found together with

• Cross-site Scripting148
• Authentication79
• Misconfiguration70
• Access Control61
• Information Disclosure61

Most upvoted Cross-Site Request Forgery reports

AllValidInformativeN/ADuplicate

1. Attacker could setup reminder remotely using brute forceN/ACross-Site Request Forgery (CSRF) · Uber
   36 votes
2. The vulnerabilities found were XSS, Public disclosure, Network enumeration via CSRF, DLL hijacking.N/ACross-Site Request Forgery (CSRF) · Eternal
   11 votes
3. Issue:Form does not contain an anti-CSRF tokenN/ACross-Site Request Forgery (CSRF) · high · Phabricator
   8 votes
4. Authenticated Cross-Site-Request-ForgeryN/ACross-Site Request Forgery (CSRF) · medium · Semmle
   8 votes
5. CSRF bug N/ACross-Site Request Forgery (CSRF) · Bumble
   6 votes
6. CSRF on comment postN/ACross-Site Request Forgery (CSRF) · medium · WordPress
   5 votes
7. Request vulnerable to CSRFN/ACross-Site Request Forgery (CSRF) · high · Phabricator
   5 votes
8. Add movie or series CSRFN/ACross-Site Request Forgery (CSRF) · medium · delight.im
   4 votes
9. CSRF in changing settings of Basic Google Maps PlacemarksN/ACross-Site Request Forgery (CSRF) · Ian Dunn
   4 votes
10. Login csrf.N/ACross-Site Request Forgery (CSRF) · Gratipay
    4 votes
11. CSRF AT SUBSCRIBE TO LIST N/ACross-Site Request Forgery (CSRF) · Paragon Initiative Enterprises
    4 votes
12. The 'Create a New Account' action is vulnerable to CSRFN/ACross-Site Request Forgery (CSRF) · Coinbase
    4 votes
13. If the website does not impose additional defense against CSRF attacks, failing to use the 'Lax' or 'Strict' values could increase the risk of exposurN/ACross-Site Request Forgery (CSRF) · low · Yelp
    3 votes
14. Send emails to all users using CamptixN/ACross-Site Request Forgery (CSRF) · Ian Dunn
    3 votes
15. CSRF in newsletter formN/ACross-Site Request Forgery (CSRF) · Sifchain
    2 votes
16. Logout CSRFN/ACross-Site Request Forgery (CSRF) · delight.im
    2 votes
17. xss N/ACross-Site Request Forgery (CSRF) · Gratipay
    2 votes
18. XSS on app.legalrobot.comN/ACross-Site Request Forgery (CSRF) · Legal Robot
    1 votes
19. CSRF bug on password changeN/ACross-Site Request Forgery (CSRF) · Coinbase