ETethiack
findings

Get a single finding

Return one finding by id (404 if not found or not authorized).

Args: finding_id (int): Primary key of the finding. db (AsyncSession): Request-scoped database session. context (ActiveContext): Resolved caller identity and scope.

Returns: FindingDetailResponse: The requested finding.

get/v1/findings/{finding_id}/

Request

  • Base URL
    https://api.ethiack.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Path parameters

finding_idinteger required

Response

Successful Response

idinteger required
titlestring required
mdstring nullable
htmlstring nullable
asset_idinteger nullable
asset_valuestring required
status'draft' | 'open' | 'triaged' | 'invalid' | 'fixed' | 'duplicate' | 'accepted' required

Finding lifecycle status.

DRAFT is the author-private pre-submission state: a hacker (or machine) composes the finding as a draft, then submit advances it to OPEN / TRIAGED, at which point it becomes visible to the event's other members. Drafts are only ever seen by their author (and privileged actors).

previous_status'draft' | 'open' | 'triaged' | 'invalid' | 'fixed' | 'duplicate' | 'accepted'

Finding lifecycle status.

DRAFT is the author-private pre-submission state: a hacker (or machine) composes the finding as a draft, then submit advances it to OPEN / TRIAGED, at which point it becomes visible to the event's other members. Drafts are only ever seen by their author (and privileged actors).

severitystring required
scorenumber nullable
requested_scorenumber nullable
cvestring nullable
cvss_vectorstring nullable
createdstring date-time required
pentest_slugstring nullable
kevboolean nullable

Whether the CVE is in the CISA KEV catalog

prioritynumber

Triage urgency in [0, 3]; lower is more urgent

event_slugstring nullable required

Previous name for pentest_slug.

Changes

No recorded changes to this operation across all 1 revision of this API.