GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e7813880ec808444354e4c122ab3ecfc671eb9bf
GraphQL introspection enabled at /graphql Types: 355 (by kind: ENUM: 45, INPUT_OBJECT: 135, INTERFACE: 19, OBJECT: 142, SCALAR: 14) Operations: - Query: Query | fields: allEndUsers, allPlaylists, bookmark, bookmarkList, endUser - Mutation: Mutation | fields: deleteHistoryEntryByItem, mergeUserData, syncUserData, updateBookmark, updateProgramSetSubscriptionByProgramSet Directives: cacheControl, deprecated, external, include, key, oneOf, sameAs, skip, specifiedBy (total: 9)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e7813880ec808444354e4c122ab3ecfc75d5dd1f
GraphQL introspection enabled at /graphql Types: 355 (by kind: ENUM: 45, INPUT_OBJECT: 135, INTERFACE: 19, OBJECT: 142, SCALAR: 14) Operations: - Query: Query | fields: allEndUsers, allPlaylists, bookmark, bookmarkList, endUser - Mutation: Mutation | fields: deleteHistoryEntryByItem, mergeUserData, syncUserData, updateBookmark, updateProgramSetSubscriptionByProgramSet Directives: cacheControl, deprecated, external, include, key, sameAs, skip, specifiedBy (total: 8)
Open service 23.36.163.233:443 · api-dev-staging.ardaudiothek.de
2026-01-22 20:51
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev-staging.ardaudiothek.de Date: Thu, 22 Jan 2026 20:52:00 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Open service 23.36.163.233:443 · api-dev-staging.ardaudiothek.de
2026-01-09 04:57
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev-staging.ardaudiothek.de Date: Fri, 09 Jan 2026 04:57:58 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Open service 23.36.163.233:443 · api-dev-staging.ardaudiothek.de
2026-01-02 02:05
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev-staging.ardaudiothek.de Date: Fri, 02 Jan 2026 02:05:09 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Open service 23.36.163.233:443 · api-dev-staging.ardaudiothek.de
2025-12-23 08:21
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev-staging.ardaudiothek.de Date: Tue, 23 Dec 2025 08:21:41 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs