vulnerability types.
3) Cross-Site Request Forgery (CSRF) remains a ‘sleeping giant’
[Grossman]. CSRF appears very rarely in CVE, less than 0.1%
in 2006, but its true prevalence is probably far greater than