Skip to content

Positive payload is causing the API /user/{id} to consider it as an invalid data. #12

Description

@p0-scanner

Description of issues

This is a critical issue, because valid data when sent to server is considered invalid. This can interrupt the users from using your platform/services.

Test Summary

We tried a positive scenario by putting value of field id as 9223372036854775807 . Testing with the maximum possible value of a 64-bit integer

GET /user/{id}

Payload:

{
  "id": 9223372036854776000
}

Response:

{
  "notAJson": "Not found"
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions