Domain cms.stage.mit.vestfor.dk
The Netherlands
Software information
Kestrel
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-26 11:00
Last seen 2026-01-23 05:38
Open for 27 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60732037d10b21cfb859d21ba5bfd0a2cd36867c9ePublic Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /api/v1/auto-complete GET /api/v1/auto-complete/{id} GET /api/v1/customer-portal GET /api/v1/customer-portal/advice GET /api/v1/customer-portal/advice/filter GET /api/v1/customer-portal/consumption GET /api/v1/customer-portal/contact GET /api/v1/customer-portal/inbox GET /api/v1/customer-portal/installation GET /api/v1/customer-portal/login GET /api/v1/customer-portal/profile GET /api/v1/customer-portal/settings GET /api/v1/district-heating/address-lookup GET /api/v1/events GET /api/v1/events/filters GET /api/v1/general/languages GET /api/v1/general/sitemap GET /api/v1/general/translations GET /api/v1/health GET /api/v1/jobs GET /api/v1/jobs/{id} GET /api/v1/login GET /api/v1/news GET /api/v1/news/tags GET /api/v1/pages GET /api/v1/pages/root GET /api/v1/pages/{id} GET /api/v1/pages/{id}/ancestors GET /api/v1/pages/{id}/children GET /api/v1/pages/{id}/descendants GET /api/v1/recycling-stations GET /api/v1/search GET /api/v1/settings GET /api/v1/vestfor-search POST /api/v1/district-heating/interest POST /api/v1/district-heating/offer POST /api/v1/district-heating/opt-out POST /api/v1/district-heating/owner-details POST /api/v1/jobs/apply/{id}Found on 2026-01-23 05:38
-
-
Open service 20.105.232.52:443 ยท cms.stage.mit.vestfor.dk
2026-01-23 05:38
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 05:39:27 GMT Server: Kestrel Request-Context: appId=cid-v1:a2a2c5ef-2332-4940-a257-fed79557e9be
Found 2026-01-23 by HttpPluginCreate report