Answer:
In a scenario where an attacker uses CSRF to access a victim's bank account, the attacker needs to know details about the victim's active session and how requests are authenticated.
In a scenario where an attacker uses CSRF to access a victim's bank account, the attacker needs to know details about the victim's active session and how requests are authenticated.
You may be interested in:
Web Security MCQs