[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.090485s sleep1=0.199908s sleep2=0.011288s baseline=0.011236s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.085298s
timing_scales=no vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
NO VARIANT: salesmanago_export_contacts did NOT show SLEEP scaling on vulnerable 3.11.2 (sleep0=0.090485s sleep1=0.199908s sleep2=0.011288s).
[*] manifest + verdict written. OUTCOME=no_variant
[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.086952s sleep1=6.076956s sleep2=12.012167s baseline=0.011267s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.089813s
timing_scales=yes vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
VARIANT CONFIRMED (alternate trigger, NOT a bypass): salesmanago_export_contacts reaches the same getExportContactsQuery() SQLi sink on vulnerable 3.11.2 (SLEEP scales: 0.086952->6.076956->12.012167s); fixed 3.11.3 blocks the Subscriber with HTTP 403 (time=0.089813s).
[*] manifest + verdict written. OUTCOME=variant_not_bypass
[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.073643s sleep1=6.066750s sleep2=12.011704s baseline=0.020218s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.084694s
timing_scales=yes vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
VARIANT CONFIRMED (alternate trigger, NOT a bypass): salesmanago_export_contacts reaches the same getExportContactsQuery() SQLi sink on vulnerable 3.11.2 (SLEEP scales: 0.073643->6.066750->12.011704s); fixed 3.11.3 blocks the Subscriber with HTTP 403 (time=0.084694s).
[*] manifest + verdict written. OUTCOME=variant_not_bypass
[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.075628s sleep1=6.067586s sleep2=12.012463s baseline=0.012445s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.102698s
timing_scales=yes vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
VARIANT CONFIRMED (alternate trigger, NOT a bypass): salesmanago_export_contacts reaches the same getExportContactsQuery() SQLi sink on vulnerable 3.11.2 (SLEEP scales: 0.075628->6.067586->12.012463s); fixed 3.11.3 blocks the Subscriber with HTTP 403 (time=0.102698s).
[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.073038s sleep1=6.067677s sleep2=12.012328s baseline=0.010659s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.074118s
timing_scales=yes vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
VARIANT CONFIRMED (alternate trigger, NOT a bypass): salesmanago_export_contacts reaches the same getExportContactsQuery() SQLi sink on vulnerable 3.11.2 (SLEEP scales: 0.073038->6.067677->12.012328s); fixed 3.11.3 blocks the Subscriber with HTTP 403 (time=0.074118s).
[*] manifest + verdict written. OUTCOME=variant_not_bypass
[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.088043s sleep1=6.102372s sleep2=12.012567s baseline=0.010450s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.075603s
timing_scales=yes vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
VARIANT CONFIRMED (alternate trigger, NOT a bypass): salesmanago_export_contacts reaches the same getExportContactsQuery() SQLi sink on vulnerable 3.11.2 (SLEEP scales: 0.088043->6.102372->12.012567s); fixed 3.11.3 blocks the Subscriber with HTTP 403 (time=0.075603s).
[*] manifest + verdict written. OUTCOME=variant_not_bypass
[*] project_cache_context prepared=false
[*] plugin 3.11.2 already present
[*] plugin 3.11.3 already present
[*] ensuring docker images present
=================== VARIANT RESULT ANALYSIS ===================
Vulnerable (export_contacts): sleep0=0.076730s sleep1=6.064347s sleep2=12.011995s baseline=0.010711s (sleep2 http=200)
Fixed     (export_contacts): sleep2 http=403 time=0.070576s
timing_scales=yes vuln_reached_200=yes fixed_blocked_403=yes
=================== VERDICT ===================
VARIANT CONFIRMED (alternate trigger, NOT a bypass): salesmanago_export_contacts reaches the same getExportContactsQuery() SQLi sink on vulnerable 3.11.2 (SLEEP scales: 0.076730->6.064347->12.011995s); fixed 3.11.3 blocks the Subscriber with HTTP 403 (time=0.070576s).
[*] manifest + verdict written. OUTCOME=variant_not_bypass