CSRF is a security vulnerability that tricks a victim into performing unintended actions on a web application where they are authenticated. By exploiting the trust that a website places in the user’s browser, attackers can force users to execute actions without their consent or knowledge.
HTTP Parameter Pollution, or HPP, is a type of web security vulnerability where an attacker manipulates HTTP request parameters to bypass input validation, inject malicious payloads, or alter the intended behaviour of a web application. By injecting additional parameters or manipulating existing ones, attackers can trick the server into processing unintended actions. This form of attack can lead to a range of exploits, including SQL injections, cross-site scripting (XSS), and even unauthorised access.