Cross-site request forgery (also known as CSRF) is an internet security vulnerability that allows an attacker to trick a user into performing an action they don’t want. This allows attackers to partially bypass the same-origin policy designed to prevent different websites from interfering with each other.
A successful CSRF attack forces the victim user to perform an unintended action. For example, changing your account email address, changing your password, sending money, etc. Depending on the nature of the action, the attacker could gain complete control of the user’s account. If the compromised user has privileged roles within the application, the attacker could gain complete control over all data and functionality of the application.