A company has noticed an apparent uptick in users disconnecting their sessions, then immediately reestablishing them. Their behavior after reestablishing the session is also noticeably different. What could this indicate? $($Select the two best options.$)$

A$.$ Replay attack

B$.$ Cross$-$site Scripting

C$.$ Forgery attack

D$.$ Injection attack