Mail.ru: Account takeover via CORS misconfigutation on https://beta.delivery-club.ru

Insufficient check for request origin allowed crossite access to beta.delivery-club.ru...