diff --git a/lms/djangoapps/commerce/views.py b/lms/djangoapps/commerce/views.py
index da6042b00e..efbe3c7429 100644
--- a/lms/djangoapps/commerce/views.py
+++ b/lms/djangoapps/commerce/views.py
@@ -136,6 +136,7 @@ class BasketsView(APIView):
             return InternalRequestErrorResponse(ex.message)
 
 
+@csrf_exempt
 @cache_page(1800)
 def checkout_cancel(_request):
     """ Checkout/payment cancellation view. """