What is Cross-Site Request Forgery (CSRF) with full information?

What is CSRF Vulnerability:
Cross-Site Request Forgery (CSRF) attacks are a type of web security vulnerability that allows an attac'ker to execute unauthorized actions on behalf of a victim user. These attacks typically exploit the fact that many web applications do not sufficiently validate the origin of requests made to the server, allowing an attacker to trick a victim into unwittingly executing an action on the attacker's behalf.

A rogue web page with a form or script that sends a request to a web application that is vulnerable is what the attacker often does in a Cross-Site Request Forgery (CSRF) attack.

Without the victim's knowledge or consent, their browser automatically submits the form or runs the script after the victim is deceived into accessing the malicious web page.

This may lead to the victim's password being changed, money being transferred from their account, or data being deleted.

How CSRF Works:
To understand how Cross-Site Request Forgery (CSRF) attacks work, it's important to understand the basics of how web applications handle requests. When a user submits a form or makes a request to a web application, the browser includes a "cookie" that identifies the user's session with the application. The web application uses this cookie to verify that the request is legitimate and authorized by the user.