API Security scan output example
This example shows a complete API Security scan report.
```json
{
"reportID": "0a739ae6-d18e-11ef-8a06-263731778ec0",
"results": [
{
"id": "0",
"name": "Server Leaks Version Information via \"Server\" HTTP Response Header Field",
"description": "The web/application server is leaking version information via the \"Server\" HTTP response header. Access to such information may facilitate attackers identifying other vulnerabilities your web/application server is subject to.",
"url": "http://localhost:5000/api/v1/extract",
"method": "POST",
"risk": "Low",
"alert": "Server Leaks Version Information via \"Server\" HTTP Response Header Field",
"tags": {
"CWE-200": "https://cwe.mitre.org/data/definitions/200.html",
"OWASP_2017_A06": "https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration.html",
"OWASP_2021_A05": "https://owasp.org/Top10/A05_2021-Security_Misconfiguration/",
"WSTG-v42-INFO-02": "https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/01-Information_Gathering/02-Fingerprint_Web_Server"
},
"statusCode": 404,
"requestBody": "--d3b92f4f-e2e3-4caa-8b00-4e43c8df0d87\r\nContent-Disposition: form-data; name=\"file\"\r\nContent-Type: text/plain\r\n\r\n\"John Doe\"\r\n--d3b92f4f-e2e3-4caa-8b00-4e43c8df0d87--",
"curlCommand": "curl -X POST \"http://localhost:5000/api/v1/extract\" -H host: localhost:5000 -H user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0 -H pragma: no-cache -H cache-control: no-cache -H accept: application/json -H content-type: multipart/form-data; boundary=d3b92f4f-e2e3-4caa-8b00-4e43c8df0d87 -H content-length: 165 -d '--d3b92f4f-e2e3-4caa-8b00-4e43c8df0d87\r\nContent-Disposition: form-data; name=\"file\"\r\nContent-Type: text/plain\r\n\r\n\"John Doe\"\r\n--d3b92f4f-e2e3-4caa-8b00-4e43c8df0d87--'"
}
],
"serverErrors": [],
"scanStartTime": "2025-01-13T11:09:04.919359+02:00",
"elapsedSeconds": 1.349090375,
"hostname": "My Computer",
"scanStatus": "Failed",
"parameters": {
"scannedAppURL": "http://localhost:5000",
"apiSpecFile": "openapi.json",
"apiSpecType": "openapi",
"timeoutSeconds": 300
}
}
```