地图 / Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer Submission

Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer Submission

业务逻辑 / Client-Side Enforcement of Server-Side Security / #3559522

厂商: Nintendo
严重程度: 中危 · CVSS 7.1
赏金: —
弱点: Client-Side Enforcement of Server-Side Security
研究员: @liz403
披露日期: 2026-07-02
资产: Nintendo Switch applications for which Nintendo is the publisher worldwide
CVE: —

该报告还没有中文解读。

时间线

2026-02-17报告提交
2026-07-02公开披露

阅读 HackerOne 原文 ↗作者 @liz403 · 版权归作者与 Nintendo 所有

同类报告

Incorrect control of the trial periodNord Security · —Information disclosure by sending a GIFLinkedIn · 2023-04-28 Yelp for Business: locked Email field silently editable via APIYelp · 2026-07-02 Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)Shopify · 2022-02-15 · $900 Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permissionShopify · 2019-10-10 Augur UI data can be completely replaced by an attacker which can lead to fund and reputation lossAugur · — · $5,000