CSRF (Cross-Site Request Forgery) pushes a logged-in user's browser to send, without their knowledge, a request to a site where they are authenticated, because cookies are attached automatically. You protect against it with anti-CSRF tokens and the cookies' SameSite attribute.
Example
A booby-trapped page submits a transfer form to the victim's bank.