What is the difference between CSRF and SSRF?

Question

Accepted Answer

CSRF is a type of attack where a malicious website tricks a user's browser into making unwanted requests, while SSRF is a type of attack where an attacker can send a crafted request from a vulnerable server.

CSRF (Cross-Site Request Forgery) involves tricking a user's browser into making unauthorized requests to a different website on which the user is authenticated.
SSRF (Server-Side Request Forgery) involves an attacker sending a crafted request from a vulnerable server, potentially accessing internal systems or performing actions on behalf of the server.
CSRF attacks typically target users, while SSRF attacks target servers and can lead to data leakage or unauthorized access.
CSRF attacks can be prevented by using tokens to validate requests, while SSRF attacks can be mitigated by implementing proper input validation and restricting server access to external resources.

What is the difference between CSRF and SSRF?

Top Panacea InfoSec IT Security Analyst interview questions & answers

Popular interview questions of IT Security Analyst

Top HR questions asked in Panacea InfoSec IT Security Analyst