GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Open service 3.126.232.38:443 · api.migration.pme.ch
2026-01-23 08:47
HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 08:47:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Wed, 05 Mar 2025 13:01:13 GMT
ETag: "1741179673"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-6q8jr
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz
Open service 3.126.232.38:443 · api.migration.pme.ch
2026-01-09 10:08
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 10:08:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Wed, 05 Mar 2025 13:01:13 GMT
ETag: "1741179673"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-c96l2
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz
Open service 3.126.232.38:443 · api.migration.pme.ch
2026-01-02 14:44
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 14:44:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Wed, 05 Mar 2025 13:01:13 GMT
ETag: "1741179673"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-mspdk
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz
Open service 3.126.232.38:443 · api.migration.pme.ch
2025-12-22 17:21
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 17:21:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=31536000, public
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Wed, 05 Mar 2025 13:01:13 GMT
ETag: "1741179673"
Vary: Cookie
Edge-Cache-Tag: 32f57,fd28b,a8bc0
X-Drupal-Cache: HIT
X-Robots-Tag: noindex, nofollow
X-LAGOON: amazeeio-rasch2>ingress-nginx>rasch-backend-k8s-migration:nginx>nginx-bb5f595b9-pxpvq
X-Robots-Tag: noindex, nofollow
Page title: Log in | RASCH CMS
<!DOCTYPE html>
<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">
<head>
<meta charset="utf-8" />
<link rel="canonical" href="https://api.migration.beobachter.ch/" />
<link rel="shortlink" href="https://api.migration.beobachter.ch/" />
<style type="text/css">body.simplelogin { background-color: #00a3da; }.simplelogin-form input.form-submit, .simplelogin-form button.form-submit, .simplelogin-form input.form-submit:hover, .simplelogin-form input.form-submit:active, .simplelogin-form input.form-submit:focus, .simplelogin .link:hover, .simplelogin .link:focus { background-color: #00a3da; } .simplelogin a, .simplelogin-form .forgot-password a, .simplelogin a:hover, .simplelogin a:focus { color: #00a3da; }</style>
<meta name="Generator" content="Drupal 9 (https://www.drupal.org)" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="/core/misc/favicon.ico" type="image/vnd.microsoft.icon" />
<title>Log in | RASCH CMS</title>
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_YBlGNMUqEM9zlkO3WIANrtF1_6wEpQeb_v8e8r4o484.css" />
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_KT27u5vbdoDj_BZHEDzztbhq5D1brrxQSQ94c3kCu54.css" />
<meta name="robots" content="noindex, nofollow">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-WT4FSQH');</script>
<!-- End Google Tag Manager -->
</head>
<body class="simplelogin seeds-root ras_root path-frontpage">
<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WT4FSQH"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->
<a href="#main-content" class="visually-hidden focusable skip-link">
Skip to main content
</a>
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
<div class="simplelogin-wrapper "><div class="simplelogin-form" style="width: 360px"><div class="simplelogin-bg"><div class="simplelogin-logo"><a href="/"><img src="/themes/custom/ras_root/images/logo.svg" alt="Home"/></a><h1>RASCH CMS</h1></div><div class="region region-highlighted"><div data-drupal-messages-fallback class="hidden"></div></div><div class="region region-content"><div class="openid-connect-login-form block block-openid-connect block-openid-connect-login" data-drupal-selector="openid-connect-login-form-2" id="block-ras-root-openidconnectlogin-2"><form action="/" method="post" id="openid-connect-login-form--2" accept-charset="UTF-8"><div><input data-drupal-selector="edit-openid-connect-client-google-login" type="submit" id="edit-openid-connect-client-google-login--2" name="google" value="Log in with google" class="button js-form-submit form-submit" /></div><input autocomplete="off" data-drupal-selector="form-horhpxciiq-9bxgrr7hpkheujcm9kjh-mzw9nygfevq" type="hidden" name="form_build_id" value="form-HoRhpxciIq-9BXGrR7hPkHeuJcM9KJh_MZW9nYgfEvQ" /><input data-drupal-selector="edit-openid-connect-login-form-2" type="hidden" name="form_id" value="openid_connect_login_form" /></form></div><div id="block-ras-root-content" class="block block-system block-system-main-block"></div></div></div></div></div>
</div>
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"user\/login","currentPathIsAdmin":false,"isFront":true,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uz