All Tests  /  Test 4888

Test Id

Test 4888

Test Trace Id

6a354487-24a4-4736-a880-8c296ff61c09

Timestamp

Tue, 23 Jun 2026 21:36:01 GMT

Scenario

Send random values in path variables

Expected Result

Should return 4XX

Result

Result Details

The following keywords were detected in the response which might suggest an error details leak: [forbidden]

Contract Path

/api/alerts/by-device/{deviceId}

Fuzzer

RandomResources

Full Request Path

https://qa-api.puk3p.online/api/alerts/by-device/HBMLQIKXMWIFHETRTQ

Http Method

get
Request Details
Payload
{
  "size": 20,
  "deviceId": "HBMLQIKXMWIFHETRTQ",
  "page": 0
}
Request Details
Headers
[
  {
    "key": "Accept",
    "value": "application/json"
  },
  {
    "key": "Content-Type",
    "value": "application/json"
  },
  {
    "key": "User-Agent",
    "value": "cats/13.8.1-SNAPSHOT (Test 4888 - RandomResources)"
  },
  {
    "key": "X-Cats-Trace-Id",
    "value": "6a354487-24a4-4736-a880-8c296ff61c09"
  }
]
Request Details
cURL
curl  -X GET \
     -H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 4888 - RandomResources)" \
-H "X-Cats-Trace-Id: 6a354487-24a4-4736-a880-8c296ff61c09" \
 \
      \
      https://qa-api.puk3p.online/api/alerts/by-device/HBMLQIKXMWIFHETRTQ
Response
{
  "responseCode": 403,
  "httpMethod": "GET",
  "responseTimeInMs": "132",
  "numberOfWordsInResponse": "1",
  "numberOfLinesInResponse": "1",
  "contentLengthInBytes": "123",
  "jsonBody": {
    "timestamp": "2026-06-23T21:36:01.503Z",
    "status": 403,
    "error": "Forbidden",
    "path": "/api/alerts/by-device/HBMLQIKXMWIFHETRTQ"
  },
  "headers": [
    {
      "key": "cache-control",
      "value": "no-cache, no-store, max-age=0, must-revalidate"
    },
    {
      "key": "content-type",
      "value": "application/json"
    },
    {
      "key": "date",
      "value": "Tue, 23 Jun 2026 21:36:01 GMT"
    },
    {
      "key": "expires",
      "value": "0"
    },
    {
      "key": "pragma",
      "value": "no-cache"
    },
    {
      "key": "server",
      "value": "nginx/1.24.0 (Ubuntu)"
    },
    {
      "key": "strict-transport-security",
      "value": "max-age=31536000 ; includeSubDomains"
    },
    {
      "key": "vary",
      "value": "Origin"
    },
    {
      "key": "x-content-type-options",
      "value": "nosniff"
    },
    {
      "key": "x-frame-options",
      "value": "DENY"
    },
    {
      "key": "x-xss-protection",
      "value": "0"
    }
  ],
  "responseContentType": "application/json"
}
CATS Replay
cats replay Test4888