GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d683e0d9a5b2e1fca769a884ed278ca4fd278ca4fd
GraphQL introspection enabled at /api/graphql Types: 32 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 24, SCALAR: 4, UNION: 1) Operations: - Query: Query | fields: file, fileOrFolder, folder, forumThread, forumThreads Directives: deprecated, include, skip (total: 3)
Open service 20.50.64.2:443 · ax.lessor.dk
2026-01-09 07:42
HTTP/1.1 200 OK
Content-Length: 1684
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 07:43:07 GMT
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, max-age=31536000
ETag: GssA0UGbIvH8/6qRl3xIiw==
Vary: ETag
Vary: Content-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-ms-middleware-request-id: 6f573f15-ef5f-4ba3-9c13-8fb3a4f60866
X-Powered-By: Express
Page title: SiteCore
<!doctype html>
<html>
<head>
<meta charset="utf-8" />
<title>SiteCore</title>
<meta http-equiv="X-UA-Compatible" content="IE=10,IE=9,IE=8,IE=edge" />
<meta name='viewport' content='width=device-width,initial-scale=1.0'>
<link rel='manifest' href='/manifest.json'>
<link rel='icon' type='image/png' href='/img/favicon.ico'>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Roboto&display=swap" rel="stylesheet">
<link rel='stylesheet' href="css/core.css">
<link rel='stylesheet' href="css/global.css">
<script type="module" src="system/core.mjs"></script>
<script type="module" src="pages/mainmenu.mjs"></script>
<script type="module" src="components/branding.mjs"></script>
<script type="module" src="components/topbar.mjs"></script>
<script type="module" src="pages/rightbar/rightbar.mjs"></script>
<script type="module" src="pages/tools/command-palette/palette.mjs"></script>
</head>
<body>
<div id="body-container">
<div id="grid-container">
<div class="branding">
<branding-component/>
</div>
<div class="top">
<topbar-component />
</div>
<div class="nav">
<main-menu />
</div>
<div id="main">
</div>
<div class="right">
<rightbar-component/>
</div>
<!--
<div class="footer">
<Breadcrumbs />
</div>
-->
</div>
<cmd-palette-component></cmd-palette-component>
</div>
</body>
</html>
Open service 20.50.64.2:443 · ax.lessor.dk
2026-01-02 05:57
HTTP/1.1 200 OK
Content-Length: 1684
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 05:57:02 GMT
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, max-age=31536000
ETag: GssA0UGbIvH8/6qRl3xIiw==
Vary: ETag
Vary: Content-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-ms-middleware-request-id: 1e9c8433-a17a-497b-928b-cdeaa6a35dc9
X-Powered-By: Express
Page title: SiteCore
<!doctype html>
<html>
<head>
<meta charset="utf-8" />
<title>SiteCore</title>
<meta http-equiv="X-UA-Compatible" content="IE=10,IE=9,IE=8,IE=edge" />
<meta name='viewport' content='width=device-width,initial-scale=1.0'>
<link rel='manifest' href='/manifest.json'>
<link rel='icon' type='image/png' href='/img/favicon.ico'>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Roboto&display=swap" rel="stylesheet">
<link rel='stylesheet' href="css/core.css">
<link rel='stylesheet' href="css/global.css">
<script type="module" src="system/core.mjs"></script>
<script type="module" src="pages/mainmenu.mjs"></script>
<script type="module" src="components/branding.mjs"></script>
<script type="module" src="components/topbar.mjs"></script>
<script type="module" src="pages/rightbar/rightbar.mjs"></script>
<script type="module" src="pages/tools/command-palette/palette.mjs"></script>
</head>
<body>
<div id="body-container">
<div id="grid-container">
<div class="branding">
<branding-component/>
</div>
<div class="top">
<topbar-component />
</div>
<div class="nav">
<main-menu />
</div>
<div id="main">
</div>
<div class="right">
<rightbar-component/>
</div>
<!--
<div class="footer">
<Breadcrumbs />
</div>
-->
</div>
<cmd-palette-component></cmd-palette-component>
</div>
</body>
</html>
Open service 20.50.64.2:443 · ax.lessor.dk
2025-12-22 21:42
HTTP/1.1 200 OK
Content-Length: 1684
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 21:42:11 GMT
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, max-age=31536000
ETag: GssA0UGbIvH8/6qRl3xIiw==
Vary: ETag
Vary: Content-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-ms-middleware-request-id: 97bcdc3e-f6fc-482a-9c6c-227f077ba127
X-Powered-By: Express
Page title: SiteCore
<!doctype html>
<html>
<head>
<meta charset="utf-8" />
<title>SiteCore</title>
<meta http-equiv="X-UA-Compatible" content="IE=10,IE=9,IE=8,IE=edge" />
<meta name='viewport' content='width=device-width,initial-scale=1.0'>
<link rel='manifest' href='/manifest.json'>
<link rel='icon' type='image/png' href='/img/favicon.ico'>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Roboto&display=swap" rel="stylesheet">
<link rel='stylesheet' href="css/core.css">
<link rel='stylesheet' href="css/global.css">
<script type="module" src="system/core.mjs"></script>
<script type="module" src="pages/mainmenu.mjs"></script>
<script type="module" src="components/branding.mjs"></script>
<script type="module" src="components/topbar.mjs"></script>
<script type="module" src="pages/rightbar/rightbar.mjs"></script>
<script type="module" src="pages/tools/command-palette/palette.mjs"></script>
</head>
<body>
<div id="body-container">
<div id="grid-container">
<div class="branding">
<branding-component/>
</div>
<div class="top">
<topbar-component />
</div>
<div class="nav">
<main-menu />
</div>
<div id="main">
</div>
<div class="right">
<rightbar-component/>
</div>
<!--
<div class="footer">
<Breadcrumbs />
</div>
-->
</div>
<cmd-palette-component></cmd-palette-component>
</div>
</body>
</html>