Open/Close Vulnerabilities 3.0 - API

/rest/{version}/vulnerabilities/setOpen

Descriptor	Value

Descriptor	Value
HTTP Method	POST
Description	Update the specified vulnerability's Open/Closed status
Required Permission	Modify Vulnerabilities
Version Introduced	2.8.0

Request Header Parameters

Parameter	Value	Required	Description

Parameter	Value	Required	Description
Accept	String	Yes	A value of ‘application/json’ must be provided.

Request POST Data Parameters

Parameter	Value	Required	Description

Parameter

Value

Required

Description

open

Boolean

No

Provide 'true' to mark the vulnerability as Open. Provide 'false' to mark the vulnerability as Closed.

Defaults to 'true' if not provided.

vulnerabilityIds

Integer

Yes*

Provide a vulnerability ID to change the status for that vulnerability. Adding multiple vulnerabilityIds parameters allows
for changing of multiple vulnerabilities at once.

Sample Calls:

curl --insecure -H 'content-type: application/x-www-form-urlencoded' -H 'accept: application/json' -H 'Authorization: APIKEY {apiKey}' -X POST --data 'open=true&vulnerabilityIds=16&vulnerabilityIds=17' http://localhost:8080/threadfix/rest/latest/vulnerabilities/setOpen

Sample Output:

If opening vulnerabilities:

{
    "message": "Vulnerabilities have been opened.",
    "success": true,
    "responseCode": -1,
    "object": [
      16,
      17
    ]
}

If closing vulnerabilities:

{
    "message": "Vulnerabilities have been closed.",
    "success": true,
    "responseCode": -1,
    "object": [
      16,
      17
    ]
}