ETethiack
pentests
pentests

Get a pentest finding

Return one pentest finding (404 if not found or not authorized).

Visible to any authenticated caller authorized for the pentest; partners restricted to organizations they actively impersonate.

Args: pentest_slug (str): Public pentest identifier. finding_id (int): Identifier of the finding within the pentest. db (AsyncSession): Request-scoped database session. context (ActiveContext): Resolved caller identity and scope.

Returns: FindingDetailResponse: The requested finding.

get/v1/pentests/{pentest_slug}/findings/{finding_id}

Request

  • Base URL
    https://api.ethiack.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Path parameters

pentest_slugstring required
finding_idinteger required

Response

Successful Response

idinteger required
titlestring required
mdstring nullable
htmlstring nullable
asset_idinteger nullable
asset_valuestring required
status'draft' | 'open' | 'triaged' | 'invalid' | 'fixed' | 'duplicate' | 'accepted' required

Finding lifecycle status.

DRAFT is the author-private pre-submission state: a hacker (or machine) composes the finding as a draft, then submit advances it to OPEN / TRIAGED, at which point it becomes visible to the event's other members. Drafts are only ever seen by their author (and privileged actors).

previous_status'draft' | 'open' | 'triaged' | 'invalid' | 'fixed' | 'duplicate' | 'accepted'

Finding lifecycle status.

DRAFT is the author-private pre-submission state: a hacker (or machine) composes the finding as a draft, then submit advances it to OPEN / TRIAGED, at which point it becomes visible to the event's other members. Drafts are only ever seen by their author (and privileged actors).

severitystring required
scorenumber nullable
requested_scorenumber nullable
cvestring nullable
cvss_vectorstring nullable
createdstring date-time required
pentest_slugstring nullable
kevboolean nullable

Whether the CVE is in the CISA KEV catalog

prioritynumber

Triage urgency in [0, 3]; lower is more urgent

event_slugstring nullable required

Previous name for pentest_slug.

Changes

No recorded changes to this operation across all 1 revision of this API.