Tool Parameter Abuse
- Category
- Tool Misuse
- Confidence
- 80% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
- GET /api/{entity}/{id} → 200 + 返回对象
- GET /api/{entity}?page=0&size=10 → 200 + 分页列表
- PUT /api/{entity}/{id} → 200 + 返回更新对象
- DELETE /api/{entity}/{id} → 204
- 缺少必填字段 → 400 + 具体字段名
- jar tf 确认 class 文件存在
text
