What is Cross-Site Request Forgery?

Cross-Site Request Forgery (CSRF) is a web application attack in which an attacker induces a user’s browser to send unauthorized, authenticated requests to a trusted site, exploiting the site’s trust in the user’s existing session or credentials.Expanded Explanation1. Technical Function and Core CharacteristicsCSRF exploits the way browsers automatically include credentials such as cookies, headers, or client certificates with requests to a target application. The attacker causes the victim’s

How widely is Cross-Site Request Forgery used?

1 organization in our directory is tagged Cross-Site Request Forgery, referenced across 5 articles and 2 open source projects.

What is Cross-Site Request Forgery most closely associated with?

Cross-Site Request Forgery is most closely associated with AI infrastructure and Cybersecurity.

Cross-Site Request Forgery (CSRF)

Last updated August 24, 2026

Human View Machine View

This is the page you're already on — the Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

WebSite

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}

Organization

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}

BreadcrumbList

{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/",
      "name": "Glossary",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/",
      "name": "Cross-Site Request Forgery",
      "position": 3
    }
  ]
}

DefinedTerm

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/#definedterm",
  "@type": "DefinedTerm",
  "additionalProperty": [
    {
      "@type": "PropertyValue",
      "name": "Articles mentioning this entity",
      "value": 5
    },
    {
      "@type": "PropertyValue",
      "name": "Open source projects",
      "value": 2
    },
    {
      "@type": "PropertyValue",
      "name": "Organizations tagged",
      "value": 1
    },
    {
      "@type": "PropertyValue",
      "name": "Organizations",
      "propertyID": "https://decisioninsights.ai/ns#taggedOrganizations",
      "value": [
        {
          "@id": "https://decisioninsights.ai/registry/django/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/django/",
          "name": "Django"
        }
      ]
    },
    {
      "@type": "PropertyValue",
      "name": "Related terms",
      "valueReference": [
        {
          "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-site-scripting-xss/",
          "name": "Cross-Site Scripting"
        },
        {
          "@id": "https://decisioninsights.ai/term/cross-access-authentication/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-access-authentication/",
          "name": "Cross-Access Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/cross-domain-resource-manager/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-domain-resource-manager/",
          "name": "Cross-Domain Resource Manager"
        },
        {
          "@id": "https://decisioninsights.ai/term/cyber-resilience-framework-crf/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cyber-resilience-framework-crf/",
          "name": "Cyber Resilience Framework"
        },
        {
          "@id": "https://decisioninsights.ai/term/runtime-application-self-protection-rasp/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/runtime-application-self-protection-rasp/",
          "name": "Runtime Application Self-Protection"
        }
      ]
    },
    {
      "@type": "PropertyValue",
      "name": "Related terms (co-occurring topics)",
      "valueReference": [
        {
          "@id": "https://decisioninsights.ai/term/ai-infrastructure/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ai-infrastructure/",
          "name": "AI infrastructure"
        },
        {
          "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
          "name": "Cybersecurity"
        },
        {
          "@id": "https://decisioninsights.ai/term/vulnerabilities/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerabilities/",
          "name": "Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/common-vulnerability-scoring-system-cvss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/common-vulnerability-scoring-system-cvss/",
          "name": "Common Vulnerability Scoring System"
        },
        {
          "@id": "https://decisioninsights.ai/term/services/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/services/",
          "name": "Services"
        },
        {
          "@id": "https://decisioninsights.ai/term/authentication/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/authentication/",
          "name": "Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/network-operator/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/network-operator/",
          "name": "Network Operator"
        },
        {
          "@id": "https://decisioninsights.ai/term/social-engineering/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/social-engineering/",
          "name": "Social Engineering"
        },
        {
          "@id": "https://decisioninsights.ai/term/antivirus-software-av/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/antivirus-software-av/",
          "name": "Antivirus Software"
        },
        {
          "@id": "https://decisioninsights.ai/term/automation/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/automation/",
          "name": "Automation"
        },
        {
          "@id": "https://decisioninsights.ai/term/binding-operational-directive-bod/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/binding-operational-directive-bod/",
          "name": "Binding Operational Directive"
        },
        {
          "@id": "https://decisioninsights.ai/term/common-vulnerabilities-and-exposures-cve/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/common-vulnerabilities-and-exposures-cve/",
          "name": "Common Vulnerabilities and Exposures"
        },
        {
          "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-site-scripting-xss/",
          "name": "Cross-Site Scripting"
        },
        {
          "@id": "https://decisioninsights.ai/term/data-center/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/data-center/",
          "name": "Data Center"
        },
        {
          "@id": "https://decisioninsights.ai/term/denial-of-service-dos/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/denial-of-service-dos/",
          "name": "Denial of Service"
        },
        {
          "@id": "https://decisioninsights.ai/term/enterprise/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/enterprise/",
          "name": "Enterprise"
        },
        {
          "@id": "https://decisioninsights.ai/term/json/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/json/",
          "name": "JSON"
        },
        {
          "@id": "https://decisioninsights.ai/term/known-exploited-vulnerabilities-kev/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/known-exploited-vulnerabilities-kev/",
          "name": "Known Exploited Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/network-address-translation/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/network-address-translation/",
          "name": "Network Address Translation"
        },
        {
          "@id": "https://decisioninsights.ai/term/node/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/node/",
          "name": "Node"
        },
        {
          "@id": "https://decisioninsights.ai/term/patch/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/patch/",
          "name": "Patch"
        },
        {
          "@id": "https://decisioninsights.ai/term/representational-state-transfer-rest/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/representational-state-transfer-rest/",
          "name": "Representational State Transfer"
        },
        {
          "@id": "https://decisioninsights.ai/term/tokens/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/tokens/",
          "name": "Tokens"
        },
        {
          "@id": "https://decisioninsights.ai/term/virtual-private-network-vpn/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/virtual-private-network-vpn/",
          "name": "Virtual Private Network"
        }
      ]
    }
  ],
  "description": "Cross-site request forgery is a web application attack where an attacker induces a user’s authenticated browser to perform unwanted actions on a trusted site. It matters to enterprises because it can enable unauthorized transactions, data changes, and administrative operations in critical systems.",
  "inDefinedTermSet": {
    "@id": "https://decisioninsights.ai/term/#termset",
    "@type": "DefinedTermSet",
    "url": "https://decisioninsights.ai/term/"
  },
  "name": "Cross-Site Request Forgery",
  "subjectOf": [
    {
      "@id": "https://decisioninsights.ai/cisa-advises-on-open5gs-webui-default-jwt-secret/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA advises on Open5GS WebUI default JWT secret",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Laurie Tyzenhaus"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/458022"
      },
      "url": "https://decisioninsights.ai/cisa-advises-on-open5gs-webui-default-jwt-secret/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-stops-ics-security-advisories-for-siemens-product-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA Stops ICS Security Advisories for Siemens Product Vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-11"
      },
      "url": "https://decisioninsights.ai/cisa-stops-ics-security-advisories-for-siemens-product-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-ceases-security-advisories-for-siemens-sicam-p850-p855-products/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA Ceases Security Advisories for Siemens SICAM P850, P855 Products",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-11"
      },
      "url": "https://decisioninsights.ai/cisa-ceases-security-advisories-for-siemens-sicam-p850-p855-products/"
    },
    {
      "@id": "https://decisioninsights.ai/vulnerabilities-affect-rockwell-automation-1783-natr/#blogposting",
      "@type": "BlogPosting",
      "headline": "Vulnerabilities Affect Rockwell Automation 1783-NATR",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-01"
      },
      "url": "https://decisioninsights.ai/vulnerabilities-affect-rockwell-automation-1783-natr/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-three-vulnerabilities-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds three vulnerabilities to KEV Catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/07/28/cisa-adds-three-known-exploited-vulnerabilities-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-three-vulnerabilities-to-kev-catalog/"
    }
  ],
  "termCode": "CSRF",
  "url": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/"
}

CollectionPage

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/",
  "@type": "CollectionPage",
  "dateModified": "2026-08-24T02:04:09Z",
  "description": "Cross-site request forgery is a web application attack where an attacker induces a user’s authenticated browser to perform unwanted actions on a trusted site. It matters to enterprises because it can enable unauthorized transactions, data changes, and administrative operations in critical systems.",
  "isPartOf": {
    "@id": "https://decisioninsights.ai/#website"
  },
  "mainEntity": {
    "@id": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/#definedterm"
  },
  "name": "Cross-Site Request Forgery",
  "sdDatePublished": "2026-08-24",
  "sdPublisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/"
}

What we add

Graph

A glossary entry defines a term and stops there. It doesn't show where the term is actually being used or written about. We track and link every article that covers it.

BlogPosting CISA advises on Open5GS WebUI default JWT secret BlogPosting CISA Stops ICS Security Advisories for Siemens Product Vulnerabilities BlogPosting CISA Ceases Security Advisories for Siemens SICAM P850, P855 Products and 2 more on this page

Counted facts

A dictionary definition doesn't say how often a term is actually used. This counts it across the graph -- articles that mention it, open source projects tagged with it, and the organizations tagged with it, listed here alongside the count. A term has no peer companies, and nothing here claims otherwise.

Articles mentioning this entity 5 Open source projects 2 Organizations tagged 1 Organizations Django Related terms Related terms (co-occurring topics)

The person who sent this agent gets an answer they can act on

Somebody dispatched this agent to evaluate Cross-Site Request Forgery for a real decision: a shortlist, a vendor comparison, a purchase. "Cross-Site Request Forgery makes X" isn't something they can act on; they need to know the claim is real and where it came from. Follow one enriched link from Act 2 and see what the agent can actually hand back to them:

The record DefinedTerm Cross-Site Request Forgery
One of its 5 linked records BlogPosting CISA advises on Open5GS WebUI default JWT secret https://decisioninsights.ai/cisa-advises-on-open5gs-webui-default-jwt-secret/
The primary source CreativeWork kb.cert.org https://kb.cert.org/vuls/id/458022 Original author: Laurie Tyzenhaus

Our summary is written by Decision Insights Threat Desk. The source keeps its own byline, credited above. Both are in the JSON.