LocalTapiola: CSRF allows attacker to delete item from customer's "Postilaatikko"

Description If the customer navigates to the CSRF-attack page shortly after viewing any message details on the "Postilaatikko", the last item that was viewed by the customer will be deleted. Please see the attached video for an illustration of the bug. Steps to reproduce 1. Log in to the...