Test Id
Test 1848
Test Trace Id
2d4b8dcf-5ddb-468c-854f-abb64fb77b95
Timestamp
Tue, 23 Jun 2026 21:28:15 GMT
Scenario
Send string fields encoded as numeric: field [timeFormat], fuzzed value [4.9E-324], original [IUYYLQRBNU]. This tests type validation and potential type coercion issues.
Expected Result
Should return 4XX
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
NumericValuesInStringFields
Full Request Path
Http Method
{
"theme": "GAMDDCYSHUMV",
"density": "IPBPENAITVIYHUIYXHTP",
"autoRefresh": false,
"landingPage": "SEAOLVOUIXZMBQZMSYD",
"timeFormat": 4.9E-324
}
[
{
"key": "Accept",
"value": "application/json"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 1848 - NumericValuesInStringFields)"
},
{
"key": "X-Cats-Trace-Id",
"value": "2d4b8dcf-5ddb-468c-854f-abb64fb77b95"
}
]
curl -X PUT \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 1848 - NumericValuesInStringFields)" \
-H "X-Cats-Trace-Id: 2d4b8dcf-5ddb-468c-854f-abb64fb77b95" \
\
-d '{"theme":"GAMDDCYSHUMV","density":"IPBPENAITVIYHUIYXHTP","autoRefresh":false,"landingPage":"SEAOLVOUIXZMBQZMSYD","timeFormat":4.9E-324}' \
https://qa-api.puk3p.online/api/account/preferences
{
"responseCode": 403,
"httpMethod": "PUT",
"responseTimeInMs": "126",
"numberOfWordsInResponse": "1",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "107",
"jsonBody": {
"timestamp": "2026-06-23T21:28:15.458Z",
"status": 403,
"error": "Forbidden",
"path": "/api/account/preferences"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-type",
"value": "application/json"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:28:15 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "application/json"
}
cats replay Test1848