Which is the description of CSRF (Cross-Site Request Forgery)?

CSRF is an attack where an attacker tricks a user into performing unintended actions on a website where they are authenticated, typically by embedding malicious requests in web pages. Option D best captures this—it describes how malicious scripts cause unintended operations. Options A, B, and C describe different vulnerabilities: A describes DDoS amplification, B describes XSS (Cross-Site Scripting), and C describes SQL Injection, respectively.

Step-by-step Derivation:
CSRF (Cross-Site Request Forgery) works by leveraging a user's authenticated session to make unauthorized requests on their behalf. The attack requires: (1) the victim is logged into a legitimate site, (2) the victim visits a malicious page, (3) the malicious page sends a request to the legitimate site using the victim's active session. Option D matches this pattern—visitors browse pages with embedded malicious scripts that trigger unintended operations. Option B is XSS (script injection on input forms), Option C is SQL Injection (malicious data in forms), and Option A is a DDoS attack on database systems. Only D describes CSRF's core mechanism of cross-site request exploitation.