Skip to main content

CreateWebVulnerabilityInput

Autogenerated input type of CreateWebVulnerability

input CreateWebVulnerabilityInput {
  assetId: Int!
  title: String!
  description: String!
  reference: String
  category: String
  patterns: [String!]
  controlSyncStatusId: ID
  solution: String!
  impactLevel: ImpactLevelCategory!
  probabilityLevel: ProbabilityLevelCategory!
  severity: SeverityCategory!
  summary: String!
  impactDescription: String!
  stepsToReproduce: String!
  compromisedEnvironment: Boolean
  cvssMetric: String
  projectId: Int
  status: IssueStatusLabel
  branchId: ID
  request: String!
  response: String!
  method: HTTPMethod!
  scheme: SchemeCategory!
  url: String!
  port: Int!
  parameters: String
  clientMutationId: String
}

Fields​

CreateWebVulnerabilityInput.assetId ● Int! non-null scalar​

CreateWebVulnerabilityInput.title ● String! non-null scalar​

CreateWebVulnerabilityInput.description ● String! non-null scalar​

CreateWebVulnerabilityInput.reference ● String scalar​

CreateWebVulnerabilityInput.category ● String scalar​

CWE Category

CreateWebVulnerabilityInput.patterns ● [String!] list scalar​

OWASP Patterns

CreateWebVulnerabilityInput.controlSyncStatusId ● ID scalar​

The scan/sync (ControlSyncStatus) that produced this vulnerability; used to attribute its origin (e.g. AI Pentest).

CreateWebVulnerabilityInput.solution ● String! non-null scalar​

CreateWebVulnerabilityInput.impactLevel ● ImpactLevelCategory! non-null enum​

CreateWebVulnerabilityInput.probabilityLevel ● ProbabilityLevelCategory! non-null enum​

CreateWebVulnerabilityInput.severity ● SeverityCategory! non-null enum​

CreateWebVulnerabilityInput.summary ● String! non-null scalar​

CreateWebVulnerabilityInput.impactDescription ● String! non-null scalar​

CreateWebVulnerabilityInput.stepsToReproduce ● String! non-null scalar​

CreateWebVulnerabilityInput.compromisedEnvironment ● Boolean scalar​

CreateWebVulnerabilityInput.cvssMetric ● String scalar​

CVSS vector (e.g. 'CVSS:3.1/AV:N/...'). The backend derives and stores the score from it; an invalid vector is ignored. Inherited by every vulnerability create/update input.

CreateWebVulnerabilityInput.projectId ● Int scalar​

CreateWebVulnerabilityInput.status ● IssueStatusLabel enum​

CreateWebVulnerabilityInput.branchId ● ID scalar​

Branch (by id) this issue is on, for a repository asset. Required on create when the repository asset has branches; must belong to the asset. Ignored for non-repository assets.

CreateWebVulnerabilityInput.request ● String! non-null scalar​

CreateWebVulnerabilityInput.response ● String! non-null scalar​

CreateWebVulnerabilityInput.method ● HTTPMethod! non-null enum​

CreateWebVulnerabilityInput.scheme ● SchemeCategory! non-null enum​

CreateWebVulnerabilityInput.url ● String! non-null scalar​

CreateWebVulnerabilityInput.port ● Int! non-null scalar​

CreateWebVulnerabilityInput.parameters ● String scalar​

CreateWebVulnerabilityInput.clientMutationId ● String scalar​

A unique identifier for the client performing the mutation.

Member Of​

createWebVulnerability mutation

Contribute to the Docs

Found something outdated or missing? Help us improve the documentation with a quick suggestion or edit.

How to contribute

Resources

By exploring our content, you'll find resources that will enhance your understanding of the importance of a Security Application Program.

Conviso Blog: Explore our blog, which offers a collection of articles and posts covering a wide range of AppSec topics. The content on the blog is primarily in English.

Conviso's YouTube Channel: Access a wealth of informative videos covering various topics related to AppSec. Please note that the content is primarily in Portuguese.