Skip to content

Commit 9cea289

Browse files
committed
Address GraphQL Introspection comments
1 parent 9e4d0c9 commit 9cea289

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

modules/auxiliary/scanner/http/graphql_introspection_scanner.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -213,7 +213,8 @@ def report_graphql_web_vuln(service, query, response)
213213
proof: response.body,
214214
name: 'GraphQL Introspection',
215215
description: 'GraphQL endpoint has enabled introspection. This can lead to information disclosure',
216-
owner: self
216+
owner: self,
217+
category: 'Information Disclosure'
217218
}
218219
)
219220
end
@@ -294,7 +295,7 @@ def run
294295
end
295296

296297
if res.code == 200
297-
print_status("#{rhost}:#{rport} - Server responded with introspected data. Reporting a vulnerability, and storing it as loot.")
298+
print_good("#{rhost}:#{rport} - Server responded with introspected data. Reporting a vulnerability, and storing it as loot.")
298299
graphql_service = report_graphql_service
299300
report_graphql_vuln
300301
report_graphql_web_vuln(graphql_service, query, res)

0 commit comments

Comments
 (0)