Which of the following statements accurately describe similarities or differences between a CSRF and a SSRF attack? Select three.

a$.$

A SSRF attack targets a user.

b$.$

A CSRF attack takes advantage of an authentication token.

c$.$

A SSRF attack can inject harmful data.

d$.$

A CSRF attack pretends to be an authorized user.

e$.$

A CSRF and a SSRF attack are not necessarily web$-$based attacks.