Upgrading to DefectDojo Version 3.4.300

The endpoint field of /api/v2/endpoint_status/#

With Locations enabled, the endpoint field of /api/v2/endpoint_status/ now carries the id that /api/v2/endpoints/ lists for the Finding’s Asset, the same ID the ?endpoint= filter takes. It used to carry the Location’s ID, which only matched /api/v2/endpoints/ when the two IDs happened to be equal. The Location’s ID is still in location_id.

?endpoint=<id> now returns only the statuses of Findings on that Endpoint’s Asset. It used to include Findings on other Assets that share the same URL.

What you need to do#

If a script reads endpoint from /api/v2/endpoint_status/ and looks the value up as a Location, read location_id instead. A script that passes it to /api/v2/endpoints/<id>/ now gets the right row.

For more information, check the Release Notes.