Avito solved the problem with a vulnerability that allowed clients to withdraw money