A web security vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location.
MITRE. (n.d.). Common Weakness Enumeration (CWE).