title: Session Fixation VS XSRF/CSRF
body: <p>What defines the two respectively?</p>
  <p>Session fixation is described as:</p>
  <blockquote>
  <p>Session Fixation is an attack that permits an attacker to hijack a valid user session. The attack explores a limitation in the way the web application manages the session ID, more specifically the vulnerable web application.`</p>
  </blockquote>
  <p>The Source: <a href="https://www.owasp.org/index.php/Session_fixation" rel="nofollow noreferrer">OWASP</a></p>
  <p>Which seems rather close to what CSRF exploits. What distinguishes the two from eachother or is <code>Session fixation</code> simply a synonym or a branch coming from CSRF?</p>
  <p>Would also like to mention that key terminology coming from the OWASP link I provided is almost identical to those mentioned in CSRF</p>