Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 2.16.183.16:443 · gapi.admin.oplevkalundborg.dk
2026-01-23 10:40
HTTP/1.1 400 Bad Request
Content-Type: application/json; charset=utf-8
Content-Length: 151
Expires: Fri, 23 Jan 2026 10:41:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 10:41:01 GMT
Connection: close
Set-Cookie: GoPublicAffinity=1769164862.343.650987.524588|4782eab11d711089353f64b6dd66f484; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
{"succeeded":false,"errors":{"general":[{"message":"Origin-headeren må ikke være tom","code":"ORIGIN_HEADER_EMPTY"}],"validation":[]},"successes":[]}
Open service 2.16.183.16:443 · gapi.admin.oplevkalundborg.dk
2026-01-09 13:49
HTTP/1.1 400 Bad Request
Content-Type: application/json; charset=utf-8
Content-Length: 151
Expires: Fri, 09 Jan 2026 13:49:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 13:49:22 GMT
Connection: close
Set-Cookie: GoPublicAffinity=1767966563.434.564566.225912|4782eab11d711089353f64b6dd66f484; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
{"succeeded":false,"errors":{"general":[{"message":"Origin-headeren må ikke være tom","code":"ORIGIN_HEADER_EMPTY"}],"validation":[]},"successes":[]}
Open service 2.16.183.18:80 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://gapi.admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:15:26 GMT Date: Thu, 01 Jan 2026 22:15:26 GMT Connection: close
Open service 2.16.183.16:80 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://gapi.admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:15:26 GMT Date: Thu, 01 Jan 2026 22:15:26 GMT Connection: close
Open service 2.16.183.18:443 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 400 Bad Request
Content-Type: application/json; charset=utf-8
Content-Length: 151
Expires: Thu, 01 Jan 2026 22:15:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 01 Jan 2026 22:15:22 GMT
Connection: close
Set-Cookie: GoPublicAffinity=1767305723.944.541836.574785|4782eab11d711089353f64b6dd66f484; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
{"succeeded":false,"errors":{"general":[{"message":"Origin-headeren må ikke være tom","code":"ORIGIN_HEADER_EMPTY"}],"validation":[]},"successes":[]}
Open service 2a02:26f0:2780:67::217:e394:443 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 400 Bad Request
Content-Type: application/json; charset=utf-8
Content-Length: 151
Expires: Thu, 01 Jan 2026 22:15:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 01 Jan 2026 22:15:22 GMT
Connection: close
Set-Cookie: GoPublicAffinity=1767305723.665.542201.401415|4782eab11d711089353f64b6dd66f484; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
{"succeeded":false,"errors":{"general":[{"message":"Origin-headeren må ikke være tom","code":"ORIGIN_HEADER_EMPTY"}],"validation":[]},"successes":[]}
Open service 2a02:26f0:2780:67::217:e394:80 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://gapi.admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:15:25 GMT Date: Thu, 01 Jan 2026 22:15:25 GMT Connection: close
Open service 2a02:26f0:2780:67::217:e384:80 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://gapi.admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:15:25 GMT Date: Thu, 01 Jan 2026 22:15:25 GMT Connection: close
Open service 2a02:26f0:2780:67::217:e384:443 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 400 Bad Request
Content-Type: application/json; charset=utf-8
Content-Length: 151
Expires: Thu, 01 Jan 2026 22:15:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 01 Jan 2026 22:15:22 GMT
Connection: close
Set-Cookie: GoPublicAffinity=1767305723.29.542201.532120|4782eab11d711089353f64b6dd66f484; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
{"succeeded":false,"errors":{"general":[{"message":"Origin-headeren må ikke være tom","code":"ORIGIN_HEADER_EMPTY"}],"validation":[]},"successes":[]}
Open service 2.16.183.16:443 · gapi.admin.oplevkalundborg.dk
2026-01-01 22:15
HTTP/1.1 400 Bad Request
Content-Type: application/json; charset=utf-8
Content-Length: 151
Expires: Thu, 01 Jan 2026 22:15:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 01 Jan 2026 22:15:22 GMT
Connection: close
Set-Cookie: GoPublicAffinity=1767305723.348.542168.436|4782eab11d711089353f64b6dd66f484; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
{"succeeded":false,"errors":{"general":[{"message":"Origin-headeren må ikke være tom","code":"ORIGIN_HEADER_EMPTY"}],"validation":[]},"successes":[]}
Open service 2a02:26f0:7100::210:12b:80 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:12:04 GMT Date: Thu, 01 Jan 2026 22:12:04 GMT Connection: close
Open service 2a02:26f0:7100::210:173:80 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:12:04 GMT Date: Thu, 01 Jan 2026 22:12:04 GMT Connection: close
Open service 2a02:26f0:7100::210:180:80 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:12:04 GMT Date: Thu, 01 Jan 2026 22:12:04 GMT Connection: close
Open service 2.16.183.16:80 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:12:04 GMT Date: Thu, 01 Jan 2026 22:12:04 GMT Connection: close
Open service 2a02:26f0:7100::210:12b:443 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 307 Temporary Redirect Location: /login?ref=/ Content-Length: 0 Cache-Control: max-age=60 Expires: Thu, 01 Jan 2026 22:13:00 GMT Date: Thu, 01 Jan 2026 22:12:00 GMT Connection: close Set-Cookie: GoPublicAffinity=1767305521.873.540152.989981|0541ce3ecda863307fd2c8b258b18333; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000
Open service 2a02:26f0:7100::210:180:443 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 307 Temporary Redirect Location: /login?ref=/ Content-Length: 0 Cache-Control: max-age=60 Expires: Thu, 01 Jan 2026 22:13:00 GMT Date: Thu, 01 Jan 2026 22:12:00 GMT Connection: close Set-Cookie: GoPublicAffinity=1767305521.693.542102.72729|0541ce3ecda863307fd2c8b258b18333; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000
Open service 2a02:26f0:7100::210:122:443 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 307 Temporary Redirect Location: /login?ref=/ Content-Length: 0 Cache-Control: max-age=60 Expires: Thu, 01 Jan 2026 22:13:00 GMT Date: Thu, 01 Jan 2026 22:12:00 GMT Connection: close Set-Cookie: GoPublicAffinity=1767305521.824.542102.254102|0541ce3ecda863307fd2c8b258b18333; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000
Open service 2a02:26f0:7100::210:173:443 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 307 Temporary Redirect Location: /login?ref=/ Content-Length: 0 Cache-Control: max-age=60 Expires: Thu, 01 Jan 2026 22:13:00 GMT Date: Thu, 01 Jan 2026 22:12:00 GMT Connection: close Set-Cookie: GoPublicAffinity=1767305521.918.540223.935373|0541ce3ecda863307fd2c8b258b18333; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000
Open service 2a02:26f0:7100::210:122:80 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:12:03 GMT Date: Thu, 01 Jan 2026 22:12:03 GMT Connection: close
Open service 2.16.183.18:443 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 307 Temporary Redirect Location: /login?ref=/ Content-Length: 0 Cache-Control: max-age=60 Expires: Thu, 01 Jan 2026 22:13:01 GMT Date: Thu, 01 Jan 2026 22:12:01 GMT Connection: close Set-Cookie: GoPublicAffinity=1767305522.173.539546.506121|0541ce3ecda863307fd2c8b258b18333; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000
Open service 2.16.183.18:80 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://admin.oplevkalundborg.dk/ Cache-Control: max-age=0 Expires: Thu, 01 Jan 2026 22:12:03 GMT Date: Thu, 01 Jan 2026 22:12:03 GMT Connection: close
Open service 2.16.183.16:443 · admin.oplevkalundborg.dk
2026-01-01 22:12
HTTP/1.1 307 Temporary Redirect Location: /login?ref=/ Content-Length: 0 Cache-Control: max-age=60 Expires: Thu, 01 Jan 2026 22:13:01 GMT Date: Thu, 01 Jan 2026 22:12:01 GMT Connection: close Set-Cookie: GoPublicAffinity=1767305522.624.540522.737137|0541ce3ecda863307fd2c8b258b18333; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000