Bug 曝光台 iQiyi RESTful API Bug | 爱奇艺 RESTful API Bug

LawisChen · May 17, 2020 · 1606 hits

Recently, we found RESTful API bugs in some popular mobile applications by a fuzzing test tool:

iQiyi - version: 10.10.0


近期,我们利用某模糊测试工具发现了几家大厂App接口存在如下bug:

爱奇艺 - 版本: 10.10.0

Appendix 附录

  • Bug ID 1

    {
    "appName": "iQiyi",
    "method": "GET",
    "url": "https://api-yuedu.iqiyi.com/book/register",
    "status_code": 500,
    "request": {
    "appVer": "A\"*500",
    "soVer": "1",
    "srcPlatform": "10"
    },
    "response_data": {
    "msg": "服务端异常",
    "code": "E00001",
    "data": {
    "reason": "Server Execution",
    "ctrl": "0001"
    }
    }
    }
No Reply at the moment.
需要 Sign In 后方可回复, 如果你还没有账号请点击这里 Sign Up