QAnalysis/QFXLABS at master · Afra-APIsec/QAnalysis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
---
parent: "V3_files_organizations_orgid_workspaces_workspaceid_upsert"
name: "V3FilesOrganizationsOrgidWorkspacesWorkspaceidUpsertPostAnonymousInvalid"
description: null
authors:
- "FX Bot"
type: "SUITE"
init: []
path: "/v3/files/organizations/{orgId}/workspaces/{workspaceId}/upsert"
endpoint: "/v3/files/organizations/{{@RandomInteger}}/workspaces/{{@RandomInteger}}/upsert"
method: "POST"
auth: "Anonymous"
headers:
- "Accept: application/json"
- "Content-Type: application/json"
testCases: []
assertions:
- "@StatusCode == 400 OR @StatusCode == 401 OR @StatusCode == 403 OR @StatusCode ==\
  \ 415"
cleanup: []
severity: "Major"
category: "Unsecured"
tags:
- "V1"
- "OWASP - OTG-AUTHN-002"
- "FX Top 10 - API Vulnerability"
- "Non-Intrusive"
inactive: false
policies: null
autoGenerated: true