What is the difference between CSRF and SSRF?

Question

Accepted Answer

CSRF is a type of attack where the attacker tricks the user into performing actions on a website without their knowledge, while SSRF is a vulnerability that allows an attacker to send crafted requests from a vulnerable server.

CSRF (Cross-Site Request Forgery) is an attack where the attacker tricks a user into performing actions on a website without their knowledge.
SSRF (Server-Side Request Forgery) is a vulnerability that allows an attacker to send crafted requests from a vulnerable server.
CSRF typically targets users, while SSRF targets servers.
CSRF can lead to unauthorized actions being performed on a user's behalf, while SSRF can lead to sensitive data being accessed or server-side resources being exploited.

Asked in TCS and 3 others

What is the difference between CSRF and SSRF?

Interview Questions from Popular Companies