Burp Suite User Forum

Login to post

Burp enterprise (graphql api) always returns 0 on site's parent_id when querying the scans

Pedro | Last updated: Oct 16, 2020 05:28PM UTC

Hello, When querying the scans or getting a single scan, when checking the folder to which a site belongs, it always returns 0 (ROOT) folder. Example: query getScans { scans { id status schedule_item { id site { id ephemeral parent_id } } } } And the response: { "data": { "scans": [ { "id": "90", "status": "succeeded", "schedule_item": { "id": "89", "site": { "id": "24", "ephemeral": false, "parent_id": "0" } } }, { "id": "88", "status": "succeeded", "schedule_item": { "id": "87", "site": { "id": "16", "ephemeral": false, "parent_id": "0" } } }, Now querying the sites to find the parent folder: query GetSiteTree { site_tree { sites { id ephemeral parent_id } folders { id name } } } and the response: { "id": "16", "ephemeral": false, "parent_id": "22" }, { "id": "24", "ephemeral": false, "parent_id": "22" }, As we can see the site 24 and 16 have the parent folder 22, but when querying the scans or a single scan, it always returns 0.

Hannah, PortSwigger Agent | Last updated: Oct 20, 2020 09:31AM UTC

Thank you for reporting this. We have raised this issue as a bug. A workaround, for the time being, would be to get the site ID then construct a separate query to get the folder details.

You need to Log in to post a reply. Or register here, for free.