Test Id
Test 4242
Test Trace Id
26a8d9b6-ce6d-4974-ae3a-129e4afb822b
Timestamp
Tue, 23 Jun 2026 21:34:04 GMT
Scenario
Send a happy flow request with a [unsupported] Accept header, value [text/html]
Expected Result
Should return 406
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
UnsupportedAcceptHeaders
Full Request Path
Http Method
{
"severity": "HIGH",
"protocol": "UDP",
"sourceIp": "194.209.17.30",
"size": 20,
"from": "2026-06-23T21:31:10.004547973Z",
"sortBy": "timestamp",
"to": "2026-06-23T21:31:10.004711556Z",
"page": 0,
"deviceId": "LSACEB",
"direction": "asc"
}
[
{
"key": "Accept",
"value": "text/html"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 4242 - UnsupportedAcceptHeaders)"
},
{
"key": "X-Cats-Trace-Id",
"value": "26a8d9b6-ce6d-4974-ae3a-129e4afb822b"
}
]
curl -X GET \
-H "Accept: text/html" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 4242 - UnsupportedAcceptHeaders)" \
-H "X-Cats-Trace-Id: 26a8d9b6-ce6d-4974-ae3a-129e4afb822b" \
\
\
https://qa-api.puk3p.online/api/alerts?severity=HIGH&protocol=UDP&sourceIp=194.209.17.30&size=20&from=2026-06-23T21%3A31%3A10.004547973Z&sortBy=timestamp&to=2026-06-23T21%3A31%3A10.004711556Z&page=0&deviceId=LSACEB&direction=asc
{
"responseCode": 403,
"httpMethod": "GET",
"responseTimeInMs": "120",
"numberOfWordsInResponse": "30",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "275",
"jsonBody": {
"notAJson": "<html><body><h1>Whitelabel Error Page</h1><p>This application has no explicit mapping for /error, so you are seeing this as a fallback.</p><div id='created'>Tue Jun 23 21:34:04 UTC 2026</div><div>There was an unexpected error (type=Forbidden, status=403).</div></body></html>"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-language",
"value": "en-US"
},
{
"key": "content-type",
"value": "text/html;charset=UTF-8"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:34:04 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "text/html;charset=UTF-8"
}
cats replay Test4242