tajammul1996 / bookinfo Goto Github PK

Description of issues

This is a critical issue, because valid data when sent to server is throwing an exception. This can stop legit users from using your platform/services.

Test Summary

We tried a positive scenario by putting value of field id as 999999999 . Testing with a large positive integer

DELETE /user/{id}

Payload:

{
  "id": 999999999
}

Response:

{
  "path": "/user/999999999",
  "error": "Internal Server Error",
  "status": 500,
  "timestamp": "2023-12-14T10:47:55.183+00:00"
}

Description of issues

This is a critical issue, because valid data when sent to server is throwing an exception. This can stop legit users from using your platform/services.

Test Summary

We tried a positive scenario by putting value of field id as 123456 . Testing with a number that has an ascending sequence of digits, but larger than previous tests

DELETE /user/{id}

Payload:

{
  "id": 123456
}

Response:

{
  "path": "/user/123456",
  "error": "Internal Server Error",
  "status": 500,
  "timestamp": "2023-12-14T10:34:01.447+00:00"
}

Description of issues

Our scan revealed multiple endpoints with response times above 1000ms. Prolonged response times like these may degrade the user experience and should be investigated & fixed.

POST /createGitlabIssue

Payload:

{
  "endpoint": "fGj3mAQl0",
  "method": "QB2iIfT",
  "payload": {},
  "response": {},
  "stateChangeTable": {},
  "gitlabProjectId": "k6Y2NkYaqc5BaPYo",
  "description": "JX3N1bYiy2Lno",
  "title": "sRvIdov1",
  "token": "1234567890",
  "labels": [
    "BgzhcLAB",
    "axLzimQOD"
  ]
}

Response:

{
  "message": "Failed to create issue"
}

Description of issues

PUT request to /review/9999999999999 encountered unexpected behaviour and returned a 500 error response code.

PUT /review/9999999999999

Payload:

"{\"forBookId\":4,\"sentiment\":\"BzuhQtURkm3\",\"createdAt\":1,\"rating\":9,\"byUserId\":7,\"comment\":\"M5OGbfabKs6\",\"id\":\"9999999999999\"}"

Response:

{
  "path": "/review/9999999999999",
  "error": "Internal Server Error",
  "status": 500,
  "timestamp": "2023-07-03T07:13:52.802+00:00"
}

Description of issues

Unable to generate a description

Test Summary

We tried a positive scenario by putting value of field id as 10 because it's Testing with a two digit integer

DELETE /book/{id}

Payload:

{
  "id": 10
}

Response:

"empty response"

Description of issues

This is a critical issue, because valid data when sent to server is throwing an exception. This can stop legit users from using your platform/services.

Test Summary

We tried a positive scenario by putting value of field id as 123456789 . Testing with a random positive integer

DELETE /user/{id}

Payload:

{
  "id": 123456789
}

Response:

{
  "path": "/user/123456789",
  "error": "Internal Server Error",
  "status": 500,
  "timestamp": "2023-12-14T10:47:59.227+00:00"
}

Description of issues

This is a critical issue, because valid data when sent to server is throwing an exception. This can stop legit users from using your platform/services.

Test Summary

We tried a positive scenario by putting value of field id as 9999999999 . Testing with a ten-digit integer at the maximum minus one

GET /review/{id}

Payload:

{
  "id": 9999999999
}

Response:

{
  "path": "/review/9999999999",
  "error": "Internal Server Error",
  "status": 500,
  "timestamp": "2023-11-02T09:45:18.652+00:00"
}