Test Id
Test 3982
Test Trace Id
b5478c7a-5563-4741-91ad-a1240fb7ac40
Timestamp
Tue, 23 Jun 2026 21:33:25 GMT
Scenario
Send primitive fields encoded as single element array: field [sourceIp], fuzzed value [[10.10.10.2]], original [10.10.10.2]. This tests type validation and potential type coercion issues.
Expected Result
Should return 4XX
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
SingleElementArrayToScalarFields
Full Request Path
Http Method
{
"severity": "HIGH",
"destinationPort": 443,
"sourcePort": 5353,
"packetCount": 230,
"description": "Traffic burst above baseline",
"type": "UDP_FLOOD_SUSPECTED",
"deviceId": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
"destinationIp": "192.168.1.10",
"bytesCount": 120000,
"protocol": "UDP",
"sourceIp": [
"10.10.10.2"
],
"windowSeconds": 5,
"timestamp": "2026-06-01T10:00:05Z"
}
[
{
"key": "Accept",
"value": "application/json"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 3982 - SingleElementArrayToScalarFields)"
},
{
"key": "X-Cats-Trace-Id",
"value": "b5478c7a-5563-4741-91ad-a1240fb7ac40"
}
]
curl -X POST \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 3982 - SingleElementArrayToScalarFields)" \
-H "X-Cats-Trace-Id: b5478c7a-5563-4741-91ad-a1240fb7ac40" \
\
-d '{"severity":"HIGH","destinationPort":443,"sourcePort":5353,"packetCount":230,"description":"Traffic burst above baseline","type":"UDP_FLOOD_SUSPECTED","deviceId":"7c9e6679-7425-40de-944b-e07fc1f90ae7","destinationIp":"192.168.1.10","bytesCount":120000,"protocol":"UDP","sourceIp":["10.10.10.2"],"windowSeconds":5,"timestamp":"2026-06-01T10:00:05Z"}' \
https://qa-api.puk3p.online/api/alerts
{
"responseCode": 403,
"httpMethod": "POST",
"responseTimeInMs": "141",
"numberOfWordsInResponse": "1",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "94",
"jsonBody": {
"timestamp": "2026-06-23T21:33:25.990Z",
"status": 403,
"error": "Forbidden",
"path": "/api/alerts"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-type",
"value": "application/json"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:33:25 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "application/json"
}
cats replay Test3982