Bug 曝光台 Pinduoduo RESTful API Bug | 拼多多 RESTful API Bug

LawisChen · May 17, 2020 · 1586 hits

Recently, we found RESTful API bugs in some popular mobile applications by a fuzzing test tool:

Pinduoduo - version: 4.77.0


近期,我们利用某模糊测试工具发现了几家大厂App接口存在如下bug:

拼多多 - 版本: 4.77.0

Appendix 附录

  • Bug ID 2

    {
    "appName": "Pinduoduo",
    "method": "GET",
    "url": "https://api.yangkeduo.com/api/cappuccino/splash",
    "status_code": 500,
    "request": {
    "client_time": "1575319562214",
    "density": "2.75",
    "height": "1821",
    "launch_type": "1",
    "pdduid": "",
    "platform": "/.:/",
    "support_formats": "1",
    "version": "1",
    "width": "1080"
    },
    "response_data": {
    "error_code": 50000,
    "error_msg": "http error:500"
    }
    }
No Reply at the moment.
需要 Sign In 后方可回复, 如果你还没有账号请点击这里 Sign Up