200-901 · Question #566
Which type of OWASP threat forges a malicious HTTP request into an application?
The correct answer is D. CSRF. Cross-Site Request Forgery (CSRF) is an OWASP threat that involves the forging of malicious HTTP requests into an application. In a CSRF attack, an attacker tricks a victim's browser into making a request on behalf of the victim to a target application where the victim is…
Question
Which type of OWASP threat forges a malicious HTTP request into an application?
Options
- AClickjacking
- BSQL Injection
- CXSS
- DCSRF
How the community answered
(50 responses)- A2% (1)
- B2% (1)
- C2% (1)
- D94% (47)
Explanation
Cross-Site Request Forgery (CSRF) is an OWASP threat that involves the forging of malicious HTTP requests into an application. In a CSRF attack, an attacker tricks a victim's browser into making a request on behalf of the victim to a target application where the victim is authenticated. This can lead to unauthorized actions being performed on the target application without the victim's consent.
Topics
Community Discussion
No community discussion yet for this question.