Web Security Scanner v1 API - Class Finding (2.1.0)

public sealed class Finding : IMessage<Finding>, IEquatable<Finding>, IDeepCloneable<Finding>, IBufferMessage, IMessage

Reference documentation and code samples for the Web Security Scanner v1 API class Finding.

A Finding resource represents a vulnerability instance identified during a ScanRun.

Inheritance

Object > Finding

Implements

IMessage<Finding>, IEquatable<Finding>, IDeepCloneable<Finding>, IBufferMessage, IMessage

Inherited Members

Object.GetHashCode()

Object.GetType()

Object.MemberwiseClone()

Object.ToString()

Namespace

Google.Cloud.WebSecurityScanner.V1

Assembly

Google.Cloud.WebSecurityScanner.V1.dll

Constructors

Finding()

public Finding()

Finding(Finding)

public Finding(Finding other)

Parameter

Name	Description
other	Finding

Properties

Body

public string Body { get; set; }

Output only. The body of the request that triggered the vulnerability.

Property Value

Type	Description
String

Description

public string Description { get; set; }

Output only. The description of the vulnerability.

Property Value

Type	Description
String

FinalUrl

public string FinalUrl { get; set; }

Output only. The URL where the browser lands when the vulnerability is detected.

Property Value

Type	Description
String

FindingName

public FindingName FindingName { get; set; }

FindingName-typed view over the Name resource name property.

Property Value

Type	Description
FindingName

FindingType

public string FindingType { get; set; }

Output only. The type of the Finding. Detailed and up-to-date information on findings can be found here: https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings

Property Value

Type	Description
String

Form

public Form Form { get; set; }

Output only. An addon containing information reported for a vulnerability with an HTML form, if any.

Property Value

Type	Description
Form

FrameUrl

public string FrameUrl { get; set; }

Output only. If the vulnerability was originated from nested IFrame, the immediate parent IFrame is reported.

Property Value

Type	Description
String

FuzzedUrl

public string FuzzedUrl { get; set; }

Output only. The URL produced by the server-side fuzzer and used in the request that triggered the vulnerability.

Property Value

Type	Description
String

HttpMethod

public string HttpMethod { get; set; }

Output only. The http method of the request that triggered the vulnerability, in uppercase.

Property Value

Type	Description
String

Name

public string Name { get; set; }

Output only. The resource name of the Finding. The name follows the format of 'projects/{projectId}/scanConfigs/{scanConfigId}/scanruns/{scanRunId}/findings/{findingId}'. The finding IDs are generated by the system.

Property Value

Type	Description
String

OutdatedLibrary

public OutdatedLibrary OutdatedLibrary { get; set; }

Output only. An addon containing information about outdated libraries.

Property Value

Type	Description
OutdatedLibrary

ReproductionUrl

public string ReproductionUrl { get; set; }

Output only. The URL containing human-readable payload that user can leverage to reproduce the vulnerability.

Property Value

Type	Description
String

Severity

public Finding.Types.Severity Severity { get; set; }

Output only. The severity level of the reported vulnerability.

Property Value

Type	Description
Finding.Types.Severity

TrackingId

public string TrackingId { get; set; }

Output only. The tracking ID uniquely identifies a vulnerability instance across multiple ScanRuns.

Property Value

Type	Description
String

ViolatingResource

public ViolatingResource ViolatingResource { get; set; }

Output only. An addon containing detailed information regarding any resource causing the vulnerability such as JavaScript sources, image, audio files, etc.

Property Value

Type	Description
ViolatingResource

VulnerableHeaders

public VulnerableHeaders VulnerableHeaders { get; set; }

Output only. An addon containing information about vulnerable or missing HTTP headers.

Property Value

Type	Description
VulnerableHeaders

VulnerableParameters

public VulnerableParameters VulnerableParameters { get; set; }

Output only. An addon containing information about request parameters which were found to be vulnerable.

Property Value

Type	Description
VulnerableParameters

Xss

public Xss Xss { get; set; }

Output only. An addon containing information reported for an XSS, if any.

Property Value

Type	Description
Xss

Xxe

public Xxe Xxe { get; set; }

Output only. An addon containing information reported for an XXE, if any.

Property Value

Type	Description
Xxe