Answer:
An attacker can use CSRF to perform information disclosure by tricking a logged-in user into unknowingly making a request that discloses sensitive information.
An attacker can use CSRF to perform information disclosure by tricking a logged-in user into unknowingly making a request that discloses sensitive information.
You may be interested in:
Web Security MCQs