Which is the description of CSRF (Cross-Site Request Forgery)?

CSRF is an attack where an attacker tricks a user into performing unintended actions on a website where they're authenticated, typically by embedding malicious scripts or forging requests. Option D correctly describes this cross-site attack mechanism. Options A, B, and C describe different vulnerabilities: A describes a database attack, B describes XSS (Cross-Site Scripting), and C describes SQL injection—none of which are CSRF.

Step-by-step Derivation:
CSRF (Cross-Site Request Forgery) definition: An attacker induces an authenticated user to perform unwanted actions on a different website without their knowledge. This occurs when malicious code is embedded in a page the user visits, causing their browser to make unauthorized requests to another site. Analysis of options: A) DDoS/database exploit—not CSRF. B) XSS (Stored or Reflected)—malicious script in input form, executes in browser, but doesn't describe the cross-site forgery of requests characteristic of CSRF. C) SQL Injection—malicious data in form input to tamper queries. D) CSRF—correctly describes embedded malicious scripts causing unintended operations on another website through the visitor's browser. Correct answer: D