Cross-Site Request Forgery (CSRF) is a type of attack that forges a malicious HTTP request and sends it from a user's browser to a different site where the user is authenticated. The attacker tricks the user into executing unwanted actions on a web application in which the user is currently authenticated. This can lead to unauthorized actions being performed on the user's behalf.