Cross-Site Request Forgery

A defect where a cross-origin page tricks the browser into sending an authenticated request to a target site, relying on automatic cookie inclusion.

See a verified Cross-Site Request Forgery exploit

Pentrova surfaces Cross-Site Request Forgery findings with a replayable PoC artifact and the chain resolver escalates confirmed findings into business impact.

Join the waitlist Read the glossary entry

/* When JS is disabled the IntersectionObserver never runs, so the `opacity: 0` initial state of reveal elements would hide content permanently. Snap everything visible. */ .scroll-reveal, [data-reveal], .reveal-group > .reveal { opacity: 1 !important; transform: none !important; animation: none !important; } .section-rule { transform: scaleX(1) !important; }