GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d67002eb2c6d04a9e04739ea0181caaa0181caaa
GraphQL introspection enabled at /graphql Types: 309 (by kind: ENUM: 30, INPUT_OBJECT: 6, INTERFACE: 9, OBJECT: 250, SCALAR: 6, UNION: 8) Operations: - Query: RootQuery | fields: authors, citySearch, commentsById, content, contentById - Mutation: RootMutation | fields: competitionRequest, mailchimpListRequest, saveWebform, sendContactRequest, sendFormRequest
Open service 18.156.63.6:443 · api.migration.cash.ch
2026-01-23 05:10
HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 05:10:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Thu, 06 Mar 2025 08:47:56 GMT
ETag: "1741250876"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-zbq7q
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz
Open service 18.156.63.6:443 · api.migration.cash.ch
2026-01-09 12:31
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 12:31:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Thu, 06 Mar 2025 08:47:56 GMT
ETag: "1741250876"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-c96l2
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz
Open service 18.156.63.6:443 · api.migration.cash.ch
2026-01-02 09:20
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 09:20:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Thu, 06 Mar 2025 08:47:56 GMT
ETag: "1741250876"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-mspdk
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz
Open service 18.156.63.6:443 · api.migration.cash.ch
2025-12-22 12:53
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 12:53:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Thu, 06 Mar 2025 08:47:56 GMT
ETag: "1741250876"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-pxpvq
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz