CSRF (Cross-Site Request Forgery) attacks pose a significant threat to web security, as they exploit the trust between a user's browser and a legitimate website. These attacks occur when an attacker tricks a user's browser into making an unintended request to a targeted website, leading to unauthorized actions being performed on behalf of the user.