Test Id
Test 3986
Test Trace Id
0d368641-9410-4584-baf9-169c25f49683
Timestamp
Tue, 23 Jun 2026 21:33:26 GMT
Scenario
Send primitive fields encoded as single element array: field [deviceId], fuzzed value [[7c9e6679-7425-40de-944b-e07fc1f90ae7]], original [7c9e6679-7425-40de-944b-e07fc1f90ae7]. This tests type validation and potential type coercion issues.
Expected Result
Should return 4XX
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
SingleElementArrayToScalarFields
Full Request Path
Http Method
{
"severity": "HIGH",
"destinationPort": 443,
"sourcePort": 5353,
"packetCount": 230,
"description": "Traffic burst above baseline",
"type": "UDP_FLOOD_SUSPECTED",
"deviceId": [
"7c9e6679-7425-40de-944b-e07fc1f90ae7"
],
"destinationIp": "192.168.1.10",
"bytesCount": 120000,
"protocol": "UDP",
"sourceIp": "10.10.10.2",
"windowSeconds": 5,
"timestamp": "2026-06-01T10:00:05Z"
}
[
{
"key": "Accept",
"value": "application/json"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 3986 - SingleElementArrayToScalarFields)"
},
{
"key": "X-Cats-Trace-Id",
"value": "0d368641-9410-4584-baf9-169c25f49683"
}
]
curl -X POST \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 3986 - SingleElementArrayToScalarFields)" \
-H "X-Cats-Trace-Id: 0d368641-9410-4584-baf9-169c25f49683" \
\
-d '{"severity":"HIGH","destinationPort":443,"sourcePort":5353,"packetCount":230,"description":"Traffic burst above baseline","type":"UDP_FLOOD_SUSPECTED","deviceId":["7c9e6679-7425-40de-944b-e07fc1f90ae7"],"destinationIp":"192.168.1.10","bytesCount":120000,"protocol":"UDP","sourceIp":"10.10.10.2","windowSeconds":5,"timestamp":"2026-06-01T10:00:05Z"}' \
https://qa-api.puk3p.online/api/alerts
{
"responseCode": 403,
"httpMethod": "POST",
"responseTimeInMs": "128",
"numberOfWordsInResponse": "1",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "94",
"jsonBody": {
"timestamp": "2026-06-23T21:33:26.543Z",
"status": 403,
"error": "Forbidden",
"path": "/api/alerts"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-type",
"value": "application/json"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:33:26 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "application/json"
}
cats replay Test3986