CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ257

VerifiedCloud Application Security

Which threat type involves sending invalid, manipulated requests through a user’s client to run commands on an application using that user’s own credentials?

Explanation

Cross-site request forgery exploits an authenticated user’s client to submit attacker-controlled requests. Because the application receives the requests with the user’s valid session credentials, it can execute the requested actions as that user.

Community Discussion

No comments yet. Be the first to start the discussion!