Weakness class · CSRF

Cross-Site Request Forgery

9,650 published CVEs name a weakness in this class; 5 of them are exploited in the wild.

9,650CVEs

5exploited

2CWEs

CWEs in this class2

CWEs of Cross-Site Request Forgery, most CVEs first
CWE	Weakness	CVEs	Exploited	Check
CWE-352	Cross-Site Request Forgery	9,637	5	14
CWE-1275	Sensitive Cookie with Improper SameSite Attribute	13	0	0

Exploited and check counts are given for the class's largest CWEs; open a CWE for its CVEs.

Data as of 2026-11-14.