Tagged Questions
1
vote
2answers
122 views
I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine?
I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine?
Edit
Assume the web server has CSRF vulnerability. No hidden token checking ...