Mail.ru: OTP bypass on user account deletion

Account deletion procedure was not sufficiently protected against bruteforce and allowed icq.com account delition valid session to victim account was required...