Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 13.107.246.38:443 · dss360services.consultdss.com
2026-01-23 15:00
HTTP/1.1 500 Internal Server Error
Date: Fri, 23 Jan 2026 15:00:38 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1292
Connection: close
Access-Control-Allow-Origin: *
ETag: W/"50c-m+I7jtwT/5S4DBb8QU/h6ujmFeA"
Strict-Transport-Security: max-age=15552000; includeSubDomains
request-context: appId=cid-v1:
X-RateLimit-Limit: 10000
X-RateLimit-Remaining: 9964
X-RateLimit-Reset: 1769181085
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
x-azure-ref: 20260123T150037Z-17544cb8c5f5tzr7hC1LONk86s0000000fqg00000000bqsg
X-Cache: CONFIG_NOCACHE
{"message":"Cannot read properties of undefined (reading 'views')","stack":"TypeError: Cannot read properties of undefined (reading 'views')\n at /home/site/wwwroot/app.js:53:19\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at next (/node_modules/express/lib/router/route.js:149:13)\n at Route.dispatch (/node_modules/express/lib/router/route.js:119:3)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at /node_modules/express/lib/router/index.js:284:15\n at Function.process_params (/node_modules/express/lib/router/index.js:346:12)\n at next (/node_modules/express/lib/router/index.js:280:10)\n at responseLogger (/home/site/wwwroot/02-middlewares/responseLogger.js:44:5)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at trim_prefix (/node_modules/express/lib/router/index.js:328:13)\n at /node_modules/express/lib/router/index.js:286:9\n at Function.process_params (/node_modules/express/lib/router/index.js:346:12)\n at next (/node_modules/express/lib/router/index.js:280:10)\n at logger (/node_modules/morgan/index.js:144:5)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)"}
Open service 13.107.246.38:443 · dss360services.consultdss.com
2026-01-09 14:36
HTTP/1.1 500 Internal Server Error
Date: Fri, 09 Jan 2026 14:36:17 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1292
Connection: close
Access-Control-Allow-Origin: *
ETag: W/"50c-m+I7jtwT/5S4DBb8QU/h6ujmFeA"
Strict-Transport-Security: max-age=15552000; includeSubDomains
request-context: appId=cid-v1:
X-RateLimit-Limit: 10000
X-RateLimit-Remaining: 9990
X-RateLimit-Reset: 1767970105
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
x-azure-ref: 20260109T143617Z-17ff644dbb8vgk8dhC1YTO2vtw000000041g000000009pb9
X-Cache: CONFIG_NOCACHE
{"message":"Cannot read properties of undefined (reading 'views')","stack":"TypeError: Cannot read properties of undefined (reading 'views')\n at /home/site/wwwroot/app.js:53:19\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at next (/node_modules/express/lib/router/route.js:149:13)\n at Route.dispatch (/node_modules/express/lib/router/route.js:119:3)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at /node_modules/express/lib/router/index.js:284:15\n at Function.process_params (/node_modules/express/lib/router/index.js:346:12)\n at next (/node_modules/express/lib/router/index.js:280:10)\n at responseLogger (/home/site/wwwroot/02-middlewares/responseLogger.js:44:5)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at trim_prefix (/node_modules/express/lib/router/index.js:328:13)\n at /node_modules/express/lib/router/index.js:286:9\n at Function.process_params (/node_modules/express/lib/router/index.js:346:12)\n at next (/node_modules/express/lib/router/index.js:280:10)\n at logger (/node_modules/morgan/index.js:144:5)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)"}
Open service 13.107.246.38:443 · dss360services.consultdss.com
2026-01-02 20:05
HTTP/1.1 400 Bad Request
Date: Fri, 02 Jan 2026 20:05:30 GMT
Content-Type: text/html
Content-Length: 1931
Connection: close
Cache-Control: no-store
X-Cache: CONFIG_NOCACHE
Page title: Service unavailable
<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<meta content='text/html; charset=utf-8' http-equiv='content-type' />
<style type='text/css'>
body {
font-family: Arial;
margin-left: 40px;
}
img {
border: 0 none;
}
#content {
margin-left: auto;
margin-right: auto
}
#message h1 {
font-size: 24px;
font-weight: normal;
color: #000000;
margin: 34px 0px 0px 0px
}
#message h2 {
font-size: 20px;
font-weight: normal;
color: #000000;
margin: 34px 0px 0px 0px
}
#message p {
font-size: 16px;
color: #000000;
margin: 8px 0px 0px 0px
}
#message hr {
margin: 15px 0px
}
#errorref {
font-size: 11px;
color: #737373;
margin-top: 41px
}
</style>
<title>Service unavailable</title>
</head>
<body>
<div id='content'>
<div id='message'>
<h1>400</h1>
<h2><span>Azure Front Door was unable to process the request.</span>
</h2>
<hr />
<p>It looks like the server is rejecting your request. The host expects an https request, not an http request.</p>
<p>Make sure you're sending the correct request. If you're not sure, try again another time or contact the site owner.</p>
<br />
<a href="https://learn.microsoft.com/en-us/azure/frontdoor/troubleshoot-issues" target="blank">Azure Documentation</a>
<br />
</div>
<div id='errorref'>
<span>Error Info:</span><span>NoError</span><br />
<span>x-azure-ref ID:</span><span> </span>
</div>
</div>
</body>
</html>
Open service 13.107.246.38:443 · dss360services.consultdss.com
2025-12-23 07:38
HTTP/1.1 500 Internal Server Error
Date: Tue, 23 Dec 2025 07:38:47 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1292
Connection: close
Access-Control-Allow-Origin: *
ETag: W/"50c-m+I7jtwT/5S4DBb8QU/h6ujmFeA"
Strict-Transport-Security: max-age=15552000; includeSubDomains
request-context: appId=cid-v1:
X-RateLimit-Limit: 10000
X-RateLimit-Remaining: 9998
X-RateLimit-Reset: 1766476428
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
x-azure-ref: 20251223T073847Z-r1b65f586b98rkb2hC1YTObkxs00000016d000000000c07r
X-Cache: CONFIG_NOCACHE
{"message":"Cannot read properties of undefined (reading 'views')","stack":"TypeError: Cannot read properties of undefined (reading 'views')\n at /home/site/wwwroot/app.js:53:19\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at next (/node_modules/express/lib/router/route.js:149:13)\n at Route.dispatch (/node_modules/express/lib/router/route.js:119:3)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at /node_modules/express/lib/router/index.js:284:15\n at Function.process_params (/node_modules/express/lib/router/index.js:346:12)\n at next (/node_modules/express/lib/router/index.js:280:10)\n at responseLogger (/home/site/wwwroot/02-middlewares/responseLogger.js:44:5)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)\n at trim_prefix (/node_modules/express/lib/router/index.js:328:13)\n at /node_modules/express/lib/router/index.js:286:9\n at Function.process_params (/node_modules/express/lib/router/index.js:346:12)\n at next (/node_modules/express/lib/router/index.js:280:10)\n at logger (/node_modules/morgan/index.js:144:5)\n at Layer.handle [as handle_request] (/node_modules/express/lib/router/layer.js:95:5)"}