LeakIX - Host development-user-service.cloudlabs.group

Domain development-user-service.cloudlabs.group

Switzerland

GOOGLE

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 142.250.186.179
Domain: development-user-service.cloudlabs.group
Port: 443
URL: https://development-user-service.cloudlabs.group

First seen 2025-12-06 06:44
Last seen 2026-02-03 09:34
Open for 59 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec1e576bb98aca2c9f5f1539bb631797ab58c64238

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
DELETE /user-service/clients/{clientId}/users/{userId}/roles/{roleName}
DELETE /user-service/users/keycloak/{id}
DELETE /user-service/users/user-keycloak
DELETE /user-service/users/{id}
DELETE /user-service/users/{id}/avatar
DELETE /user-service/users/{id}/v2
GET /health/check
GET /health/details
GET /tests/server-status
GET /user-service/auth/clients/{clientId}/resources
GET /user-service/auth/clients/{clientId}/roles
GET /user-service/auth/clients/{clientId}/roles/{roleName}
GET /user-service/auth/token/validity
GET /user-service/auth/user/profile
GET /user-service/clients/{clientId}/permission-matrix
GET /user-service/clients/{clientId}/user-with-roles
GET /user-service/clients/{clientId}/users-ids
GET /user-service/clients/{clientId}/users-ids/by-email
GET /user-service/clients/{clientId}/users-with-roles/old
GET /user-service/clients/{clientId}/users/{userId}/roles
GET /user-service/educational-levels
GET /user-service/genders
GET /user-service/impersonate/user/v1
GET /user-service/impersonate/users
GET /user-service/invites/by-email
GET /user-service/invites/by-email/list
GET /user-service/invites/by-retry-code
GET /user-service/invites/by-uuid
GET /user-service/invites/organizations/{organizationId}/subscriptions/{subscriptionId}
GET /user-service/invites/subscriptions/{subscriptionId}
GET /user-service/invites/subscriptions/{subscriptionId}/by-email
GET /user-service/languages
GET /user-service/notifications
GET /user-service/notifications/{id}
GET /user-service/notifications/{id}/detail
GET /user-service/notifications/{userId}/last-notifications
GET /user-service/sessions
GET /user-service/sessions/by-date-range
GET /user-service/sessions/clever-temporal-user/{id}
GET /user-service/sessions/count
GET /user-service/sessions/metrics
GET /user-service/sessions/temporal-sessions/{id}
GET /user-service/terms-and-conditions
GET /user-service/terms-and-conditions/all
GET /user-service/terms-and-conditions/{id}
GET /user-service/username-invites/organizations/{organizationId}/subscriptions/{subscriptionId}
GET /user-service/users
GET /user-service/users/by-email
GET /user-service/users/exchange-token
GET /user-service/users/identity-provider/{userId}
GET /user-service/users/identity-types
GET /user-service/users/keycloak/{userId}
GET /user-service/users/profile
GET /user-service/users/sync
GET /user-service/users/v2
GET /user-service/users/{clientId}/roles/{roleName}
GET /user-service/users/{email}/keycloak-integrity
GET /user-service/users/{email}/profile-integrity
GET /user-service/users/{userId}
GET /user-service/users/{userId}/accounts
GET /user-service/users/{userId}/has-profile
PATCH /user-service/terms-and-conditions/active-version/{id}
PATCH /user-service/users/{id}/required-actions
PATCH /user-service/users/{userId}/enabled
PATCH /user-service/users/{userId}/password
PATCH /user-service/users/{userId}/update-enabled
POST /user-service/auth/clients/{clientId}/permissions
POST /user-service/auth/logout
POST /user-service/auth/permissions-request
POST /user-service/auth/sena
POST /user-service/auth/sena/saved
POST /user-service/auth/session
POST /user-service/auth/token-exchange/{userId}
POST /user-service/clients/{clientId}/redirect-url
POST /user-service/clients/{clientId}/users-by-emails
POST /user-service/clients/{clientId}/users-with-roles
POST /user-service/impersonate-tenant/impersonate
POST /user-service/invites
POST /user-service/invites/{uuid}/confirmed/email
POST /user-service/notifications/{notificationId}/reports
POST /user-service/profile-account-groups/create-profile-account-groups
POST /user-service/sessions/clever-temporal-user
POST /user-service/sessions/metrics/active-sessions
POST /user-service/sessions/metrics/mean-time
POST /user-service/sessions/metrics/sessions-by-organization
POST /user-service/sessions/metrics/total-time
POST /user-service/sessions/temporal-sessions
POST /user-service/terms-and-conditions/agreement
POST /user-service/username-invites
POST /user-service/username-invites/{invitationId}/users
POST /user-service/users/by-emails
POST /user-service/users/by-user-ids
POST /user-service/users/by-usernames
POST /user-service/users/fullname
POST /user-service/users/keycloak-forgot-password
POST /user-service/users/required-actions
POST /user-service/users/summary
POST /user-service/users/validate-available
POST /user-service/users/validate-user-list
POST /user-service/users/{userId}/profile
PUT /user-service/impersonate/open-session
PUT /user-service/invites/reset
PUT /user-service/invites/update-status
PUT /user-service/invites/{uuid}/retry
PUT /user-service/notifications/{notificationId}/users/{userId}/read
PUT /user-service/notifications/{notificationId}/users/{userId}/received
PUT /user-service/users/{email}/keycloak/attributes

Found on 2026-02-03 09:34

Create report

Open service 2a00:1450:400a:1000::79:80 · development-user-service.cloudlabs.group

2026-02-03 09:34

HTTP/1.1 302 Found
location: https://development-user-service.cloudlabs.group/
x-cloud-trace-context: a138aa7733ec147b28d7132778239b27
date: Tue, 03 Feb 2026 09:35:19 GMT
content-type: text/html
server: Google Frontend
Content-Length: 0
Connection: close

Found 2026-02-03 by HttpPlugin

Create report

Domain summary

development-user-service.cloudlabs.group 1

1 recorded

IP summary

2a00:1450:400a:1000::79 1 142.250.186.179 1

2 recorded