Improper input validation in Gaudire Assassin Game
CVE-2026-7165
The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador' and 'keyJugadorObjectiu' parameters allow the modification of other users’ information without requiring prior authorization validation. This could enable a…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Gaudire Assassin Game — versions last version