Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How do I get issue_index of a reported issue in GraphQL Enterprise Burp Suite

Glenn | Last updated: Feb 04, 2021 05:49PM UTC

I have a system of GraphQL request to get the scans of recent scans. I need to get the issue_index of these issues. Her is the request I am running: query GetScanIuuse ($id: IS!) {scan(id: $id} id status issues(start 0, count: 100){ issue_type {type_index name}}}} and I use this as the variable section {"id":"1969"} What is returned: {"data": { "scan": { "id" "1969", "status": "succeeded", "issues": [ { "issue_type": null Thos goes on for every issue

Glenn | Last updated: Feb 04, 2021 05:52PM UTC

Sorry, the version number of Burp Suite Enterprise is: 2020.11.5632

Michelle, PortSwigger Agent | Last updated: Feb 05, 2021 12:10PM UTC

Thanks for your message. When you say issue_index, are you looking for a unique identifier for the issue? If so, does the serial_number give you the information you're after? serial_number(): ID! A unique identifier for the individual instance of the issue. For example: query ScanInfo { scan(id: 2) { site_name id status issues(start:0,count:100){serial_number,severity,path} } }

Glenn | Last updated: Feb 05, 2021 01:54PM UTC

Sorry, I'm actually looking for the type_index of the issue. That was my mistake.

Michelle, PortSwigger Agent | Last updated: Feb 05, 2021 04:34PM UTC

That's ok, you can get the type_index information by querying the issue, for example: query getIssue ($scanId: ID!, $serialNumber: ID!) { issue (scan_id: $scanId, serial_number: $serialNumber) { confidence serial_number severity novelty issue_type{type_index,name} } } Can you tell me a bit more about the query you're trying to build so I can check if I'm thinking along the right lines, are you trying to get the same kind of info but when querying an entire scan rather than just one issue?

Glenn | Last updated: Feb 05, 2021 08:40PM UTC

Yes, I was trying to get the type_index when I query all the issues in one call.

Michelle, PortSwigger Agent | Last updated: Feb 08, 2021 12:46PM UTC

Thanks for the update. I'm afraid there is currently an issue when trying to return this information via the scan rather than the individual issue. This has been reported to our developers and we have linked this thread so we can post here when there is an update.

Glenn | Last updated: Feb 08, 2021 03:34PM UTC

OK, thank you.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.