CSRF is an attack where a victim’s browser is tricked into making an authenticated request to a trusted application without their consent.