{% extends 'scenario-basic.html' %} {% block title-text %} Tiredful API: Information Disclosure {% endblock %} {% block content %}

Challenge: Information Disclosure

A library decided to provide services to other third party through its APIs. One of the implemented API is to get the details of the book by providing ISBN number.
We suspect that the API is revealing interesting information apart from the book details
Following is the API-end point for getting book details.

        GET method  http://{{ request.get_host }}/api/v1/books/<ISBN>/
Following are the book ISBNs available: {% if books %}
    {% for book in books %}
  1. {{ book.ISBN }}
    2. {% endfor %}
{% endif %}

Aim: Try to get stacktrace information. {% endblock %}