GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ee0f9d32b6ed8ec2be1c31c765112dfd48ad54af
GraphQL introspection enabled at /graphql Types: 355 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 295, SCALAR: 38) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : icon=map[bulb:map[path:[m 195.6227 28.6754 c -23.4691 -25.1576 -46... setting=map[category:onlineBallers cfg_id:22 collection_injection_for... sponsor=[map[file:https://assets-sandbox.arsenal.com/sandbox/files/fi... sponsorRevisionId=697 appPush=map[cfg_id:31 enable_push:disabled frequency:0 hours and 01 m... swrveDefaultProps (args: none) : revId=2196 user (args: none) : banned=false birthDate= contactNumber= country= crmId= accessToken=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ee0f9d32b6ed8ec2be1c31c765112dfd364a6e5f
GraphQL introspection enabled at /graphql Types: 355 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 295, SCALAR: 38) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : sponsor=[map[file:https://assets-sandbox.arsenal.com/sandbox/files/fi... sponsorRevisionId=697 appPush=map[cfg_id:31 enable_push:disabled frequency:0 hours and 01 m... icon=map[bulb:map[path:[m 195.6227 28.6754 c -23.4691 -25.1576 -46... setting=map[category:onlineBallers cfg_id:22 collection_injection_for... swrveDefaultProps (args: none) : revId=2196 user (args: none) : contactNumber= country= crmId= accessToken= banned=false birthDate=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e4228b4a418e7c7a5caff4df6c2311e5b811062b
GraphQL introspection enabled at /graphql Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : appPush=map[cfg_id:31 enable_push:disabled frequency:0 hours and 01 m... icon=map[bulb:map[path:[m 195.6227 28.6754 c -23.4691 -25.1576 -46... setting=map[category:onlineBallers cfg_id:22 collection_injection_for... sponsor=[map[file:https://assets-sandbox.arsenal.com/sandbox/files/fi... sponsorRevisionId=697 swrveDefaultProps (args: none) : revId=2196 user (args: none) : contactNumber= country= crmId= accessToken= banned=false birthDate=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e4228b4a418e7c7a5caff4df6c2311e5f7beb5f0
GraphQL introspection enabled at /graphql Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38eaf2528aaf05b0cd2f8196504aeed9f707d005a
GraphQL introspection enabled at /graphql Types: 354 (by kind: ENUM: 2, INPUT_OBJECT: 21, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35e3ee2e6a8ab7b96ce68fc9b4adddf39d6703404
GraphQL introspection enabled at /graphql Types: 352 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 293, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33b70535fe0186e6d6eb9a018fd6563fa76721deb
GraphQL introspection enabled at /graphql Types: 349 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 290, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ffb99a301ab6efb44ec0a1ed370fdc37abbf7e62
GraphQL introspection enabled at /graphql Types: 350 (by kind: ENUM: 2, INPUT_OBJECT: 21, OBJECT: 290, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39ae919461218f6b68ea6ac7b8efee459e5a92a64
GraphQL introspection enabled at /graphql Types: 351 (by kind: ENUM: 2, INPUT_OBJECT: 21, OBJECT: 291, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36f0dd46acaafefdade48ccff428ed1c51018ce90
GraphQL introspection enabled at /graphql Types: 351 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 291, SCALAR: 38) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Open service 2.16.204.88:443 · afc-dev.graph.arsenal.com
2026-01-09 19:36
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 09 Jan 2026 19:36:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 19:36:28 GMT Connection: close Alt-Svc: h3=":443"; ma=93600
Open service 2.16.204.88:443 · afc-dev.graph.arsenal.com
2026-01-02 22:24
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 02 Jan 2026 22:24:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 22:24:43 GMT Connection: close Alt-Svc: h3=":443"; ma=93600
Open service 2.16.204.88:443 · afc-dev.graph.arsenal.com
2025-12-23 06:35
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Tue, 23 Dec 2025 06:35:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 23 Dec 2025 06:35:38 GMT Connection: close Alt-Svc: h3=":443"; ma=93600
Open service 2.16.204.88:443 · afc-dev.graph.arsenal.com
2025-12-21 02:16
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Sun, 21 Dec 2025 02:16:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 21 Dec 2025 02:16:55 GMT Connection: close Alt-Svc: h3=":443"; ma=93600
Open service 2.16.204.88:443 · afc-dev.graph.arsenal.com
2025-12-19 06:48
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 19 Dec 2025 06:48:23 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Dec 2025 06:48:23 GMT Connection: close Alt-Svc: h3=":443"; ma=93600