search

jaleelsyed / test1

0 stars 0 forks source link

Unsecured on POST:null #875

Open jaleelsyed opened 5 years ago

jaleelsyed commented 5 years ago

Title : Unsecured Vulnerability on POST:null

Project : syncAll

Description : null

Risk : Unsecured

Severity : Major

API Endpoint : null

Environment : null

Playbook : ExampleV1HotelsPostAnonymousInvalid

Researcher :
Quick Tips :

Suggestion : null

Effort Estimate : null

Wire logs :

2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : URL [http://18.144.38.115:8090/example/v1/hotels] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Method [POST] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Auth [] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Request [{ "city" : "Romagueratown", "description" : "13D4AQT2", "id" : "", "name" : "13D4AQT2", "rating" : "1758548153" }] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Request-Headers [{Content-Type=[application/xml, application/json], Accept=[application/xml, application/json]}] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Response [Invalid mime type "application/xml, application/json": Invalid token character ',' in token "xml, application/json"] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Response-Headers [{}] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : StatusCode [500] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Time [23] 2019-09-04 10:34:37 DEBUG [ExampleV1HotelsPostAnonymousInvalid] : Size [115] 2019-09-04 10:34:37 ERROR [ExampleV1HotelsPostAnonymousInvalid] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [500 == 401 OR 500 == 403] result [Failed]

Important Links :
Vulnerability Details : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/recommendations/8a80cb816cfb200d016cfbd72d920149/details

Project : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/jobs

Environment : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/environments/null/edit

Scan Dashboard : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/jobs/8a80cb816ce1de16016ce27355b30030/runs/8a80cb816cfb200d016cfbd715b00139

Playbook : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/template/ExampleV1HotelsPostAnonymousInvalid

Coverage : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/configuration

Code Sample : https://localhost:8080/#/app/projects/8a80cb816ce1de16016ce27343700000/recommendations/8a80cb816cfb200d016cfbd72d920149/codesamples

PS: : Please contact null For APISec access and login issues.

--- APISec Bot ---