What is cross-site request forgery CSRF?

Cross-site request forgery tricks a browser into sending an unwanted authenticated request to a site that relies on automatically attached credentials such as cookies. The attacker abuses the victim browser rather than stealing the session directly.