Bug Bounty Channel

Hacktivity from putsi

 

The PdfServlet-functionality used by the "Tee vakuutustodistus" allows injection of custom PDF-content via CSRF-attack