According to techtarget.com Cross-Site Request Forgery is:
a method of attacking a Web site in which an intruder masquerades as a legitimate and trusted user. An XSRF attack can be used to modify firewall settings, post unauthorized data on a forum or conduct fraudulent financial transactions. A compromised user may never know that such an attack has occurred. If the user does find out about an attack, it may only be after the damage has been done and a remedy may be impossible.
An example of a Cross-Site Request Forgery bug within Android O.S
Wireless File Transfer Pro Android - CSRF Vulnerabilities
Multiple cross site request forgery issues has been discovered in the Wireless File Transfer Pro 1.0.1 android mobile web-application. The mobile web-application is vulnerable to a combination of cross site request forgery and local command injection attacks.
The security risk of the cross site request forgery web vulnerability in the create and delete function is estimated as medium. (CVSS 2.3)
What makes an android application vulnerable to Cross-Site Request Forgery, as although I've seen and understand its use when used against regular websites. I don't understand what factors make Android application code vulnerable to Cross-Site Request Forgery attacks.