One of the most common vulnerabilities that cybercriminals use to launch attacks is called Cross-Site Request Forgery. I sent a malicious link to a genuine website user in a cross-site request forgery (CSRF) attack. A fake request is issued on the user’s behalf when they click the malicious link. Every year, there is a surge in these online attacks, which affect a lot of businesses. Several approaches have been offered for preventing CSRF attacks, including the HTTP header, Random Token validation, and Client Site Proxy, yet hackers are still using CSRF attacks. The author conducted research on the CSRF attack and its defense mechanism in this work. The article also discusses the advantages and disadvantages of the current defensive system.