Test Id
Test 2557
Test Trace Id
20a2ad4f-1ec8-4bce-80ea-431bd3e60d3b
Timestamp
Tue, 23 Jun 2026 21:29:57 GMT
Scenario
Send primitive fields encoded as single element array: field [language], fuzzed value [[US]], original [US]. This tests type validation and potential type coercion issues.
Expected Result
Should return 4XX
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
SingleElementArrayToScalarFields
Full Request Path
Http Method
{
"fullName": "Carley Boyle",
"language": [
"US"
],
"phone": "+1 (258) 385-8333",
"email": "hermione.cyan@cats.io",
"timezone": "Asia/Urumqi"
}
[
{
"key": "Accept",
"value": "application/json"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 2557 - SingleElementArrayToScalarFields)"
},
{
"key": "X-Cats-Trace-Id",
"value": "20a2ad4f-1ec8-4bce-80ea-431bd3e60d3b"
}
]
curl -X PUT \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 2557 - SingleElementArrayToScalarFields)" \
-H "X-Cats-Trace-Id: 20a2ad4f-1ec8-4bce-80ea-431bd3e60d3b" \
\
-d '{"fullName":"Carley Boyle","language":["US"],"phone":"+1 (258) 385-8333","email":"hermione.cyan@cats.io","timezone":"Asia/Urumqi"}' \
https://qa-api.puk3p.online/api/account/profile
{
"responseCode": 403,
"httpMethod": "PUT",
"responseTimeInMs": "135",
"numberOfWordsInResponse": "1",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "103",
"jsonBody": {
"timestamp": "2026-06-23T21:29:57.589Z",
"status": 403,
"error": "Forbidden",
"path": "/api/account/profile"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-type",
"value": "application/json"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:29:57 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "application/json"
}
cats replay Test2557