POJIA破甲
地图 / [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotely

[Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotely

注入与走私 / 资源注入 / #3062122

厂商
Nintendo
严重程度
高危 · CVSS 9.3
赏金
—
弱点
资源注入
研究员
@roccodev
披露日期
2025-05-15
资产
Nintendo Switch applications for which Nintendo is the publisher worldwide
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @roccodev · 版权归作者与 Nintendo 所有

同类报告

Arbitrary local system file read on open-xchange serverOpen-Xchange · — · $2,000Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20Render content from untrusted sources via web_preview endpoint on Acronis CloudAcronis · — · $200