A customer logs into their bank account and simultaneously checks their email. They see an email containing a

Question

A customer logs into their bank account and simultaneously checks their email. They see an email containing a link that, when clicked, initiates a transfer of funds from the user's bank account to an attacker's account.

What type of vulnerability does this situation describe?

answer

XSS


Injection


CSRF


Broken access control

GPT-5 mini · Answer

CSRF (Cross-Site Request Forgery).

Explanation: the attacker tricks an already-authenticated user into performing an unwanted action (transfer) by having them click a link on another site (email), leveraging the user's active session.

All Answers 1

Submit Your Answer