Which is the description of CSRF (Cross-Site Request Forgery)?

CSRF is fundamentally a social engineering attack where an attacker tricks an authenticated user into unknowingly performing actions on a website they're logged into. The other options describe XSS (option A), injection attacks (option B), or are poorly articulated security concepts (options C and D as originally stated). The correct definition emphasizes the deceptive redirection of an authenticated user's trust.

Step-by-step Derivation:
CSRF (Cross-Site Request Forgery) attacks work by exploiting the trust a website has in a user's browser. When a user is authenticated on Site A and visits a malicious link on Site B, the attacker can forge a request that Site A will execute using the user's existing session/cookies. This is distinct from XSS (malicious script injection) or injection attacks. Option D correctly captures this mechanism: the attacker tricks the authenticated user into performing unwanted actions. Options A, B, and C describe other attack types or use unclear/corrupted language ('mid-data').