Response fields not showing up in Vuln Modal/Vuln message in certain edge cases for DAST
As part of API Fuzzing we updated the show/hide logic for Request/Response fields in the Vuln Details and Vuln Modal views.
For DAST the fields don't show up because we are missing some info it seems. Here is a summary of the needed fields to show the Request/Resonse fields
Request:
method && url && headerLines
Response/Recorded Response:
statusCode && reasonPhrase && headerLines
Bug for DAST
We are missing the reasonPhrase for DAST sourced vulns. Seems like it should be OK
{
"headers": [
{
"name": "Content-Type",
"value": "text/html;charset=UTF-8"
},
{
"name": "Content-Length",
"value": "67"
},
{
"name": "Date",
"value": "Thu, 14 Jan 2021 08:37:38 GMT"
}
],
"reason_phrase": "",
"status_code": 200,
"body": "SQLException: ERROR: syntax error at or near \"string\"\n Position: 1"
}
Edited by -
