Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb450568cc07178d73e7178d73e7178d73e7178d73e
Public Swagger UI/API detected at path: /api/swagger.json - sample paths: GET /liveness POST /cybersource/responseUrl
Open service 23.50.131.145:443 · api-utils-preprod.miumiu.com
2026-01-09 05:30
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:bb7b9f97-a0e0-4d08-b644-f2cf8886ab8a Expires: Fri, 09 Jan 2026 05:30:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 05:30:40 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding x-api-request-correlation-id: 9b08332d-eb74-44a7-a165-32693c868b47 Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload
Open service 23.50.131.145:443 · api-utils-preprod.miumiu.com
2026-01-02 05:04
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:bb7b9f97-a0e0-4d08-b644-f2cf8886ab8a Expires: Fri, 02 Jan 2026 05:04:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 05:04:55 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding x-api-request-correlation-id: 5794117e-972b-4076-9639-268d712efd40 Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload
Open service 23.50.131.145:443 · api-utils-preprod.miumiu.com
2025-12-22 16:38
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:bb7b9f97-a0e0-4d08-b644-f2cf8886ab8a Expires: Mon, 22 Dec 2025 16:38:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 16:38:09 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding x-api-request-correlation-id: d4067c7a-c08c-46c1-8052-826f29014d6c Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload
Open service 23.50.131.145:443 · api-utils-preprod.miumiu.com
2025-12-20 15:34
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:bb7b9f97-a0e0-4d08-b644-f2cf8886ab8a Expires: Sat, 20 Dec 2025 15:34:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 20 Dec 2025 15:34:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding x-api-request-correlation-id: 9219ed8e-14a3-46d5-9f64-86f0c45a8114 Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload