Get session vulnerabilities

Retrieve the list of vulnerabilities reported for a specific session.

get/session/{sessionID}/vulnerability

Path parameters

sessionIDstring required

Session ID

Query parameters

directorystring

Response

Vulnerability list

idstring
severity'critical' | 'high' | 'medium' | 'low' | 'info' required
titlestring required
descriptionstring required
cwe_idstring
filestring
line_startinteger
line_endinteger
steps_to_reproducestring
business_impactstring
recommendationstring
pocstring
endpointstring
attack_vectorstring
status'new' | 'approved' | 'duplicate' | 'open' | 'fixed' | 'ignored'
candidate'critical' | 'high' | 'medium' | 'low' | 'info'
duplicate_ofstring
message_idstring

Changes

Changed in 5 of the 102 revisions of this API.136

    • added the optional property items/candidate to the response with the 200 status

      response-optional-property-added

  • e7837fb0de8f32See the full diff
    • added the new approved enum value to the items/status response property for the response status 200

      response-property-enum-value-added

    • added the new duplicate enum value to the items/status response property for the response status 200

      response-property-enum-value-added

    • added the new new enum value to the items/status response property for the response status 200

      response-property-enum-value-added

    • added the optional property items/duplicate_of to the response with the 200 status

      response-optional-property-added

    • the status response's property default value changed from open to new for the status 200

      response-property-default-value-changed

    • added the optional property items/attack_vector to the response with the 200 status

      response-optional-property-added

    • added the optional property items/endpoint to the response with the 200 status

      response-optional-property-added

    • endpoint added

      endpoint-added

    • api path removed without deprecation

      api-path-removed-without-deprecation

    This revision also has 36 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog