Skip to content

Instantly share code, notes, and snippets.

@wwwziziyu

wwwziziyu/gist:6c7df331c9ad82d8d1800733d33e6438

Last active November 22, 2023 05:21
Show Gist options
  • Save wwwziziyu/6c7df331c9ad82d8d1800733d33e6438 to your computer and use it in GitHub Desktop.
Save wwwziziyu/6c7df331c9ad82d8d1800733d33e6438 to your computer and use it in GitHub Desktop.
Download ZIP
Mercedes me IOS APP unauthorized access to booking maintenance orders
Raw
gistfile1.txt
Mercedes me IOS APP unauthorized access to booking maintenance orders
Affected version: APP version <=1.34.0
Test tool: iPhone 13 pro-ios 16.6.1+Yakit1.2.7
Vulnerability URL ：
We can check other orders by traversing odd numbers
Order information includes 4s shop, owner's phone number, name, model, date and other information
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment