https://insinuator.net/tags/csrf/ Recent content in CSRF on Insinuator.net - Bold Statements Hugo en-us Fri, 02 Aug 2013 00:00:00 +0000 https://insinuator.net/2013/08/cross-site-request-forgery-with-cross-origin-resource-sharing/ Fri, 02 Aug 2013 00:00:00 +0000 https://insinuator.net/2013/08/cross-site-request-forgery-with-cross-origin-resource-sharing/ <p>During one of our last projects in a large environment we encountered an interesting flaw. Although it was not possible to exploit it in this particular context, it’s worth to be mentioned here. The finding was about <a href="https://www.owasp.org/index.php/CSRF" title="OWASP CSRF">Cross-Site Request Forgery</a>, a quite well-known attack that forces a user to execute unintended actions within the authenticated context of a web application. With a little help of social engineering (like sending a link via email, chat, embedded code in documents, etc…) an attacker may force the user to execute actions of the attacker’s choice.</p>