Security Test: Invalid parameters in path¶

Scanner(s) Support¶

Description¶

Default Severity: info

When endpoints aren’t set up correctly with defined path parameters, it can lead to unexpected behavior. Developers might accidentally make mistakes when specifying the location of input values in URLs, which can cause the server to misinterpret data and even open a door for attacks like injections. If an API misroutes requests or can be tricked into processing unexpected input, it risks exposing data or behavior that wasn't intended to be public, so it’s important to follow the proper guidelines and carefully validate inputs.

Reference:

• https://swagger.io/docs/specification/paths-and-operations/
  • https://swagger.io/specification/#path-templating

Configuration¶

Identifier: schema/invalid_parameters_in_path

Examples¶

All configuration available:

checks:
  schema/invalid_parameters_in_path:
    skip: false # default

Compliance and Standards¶