Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035499499217d0216d77d0216d77d0216d77d0216d77d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Sellers
GET /api/Sellers/{id}
Open service 20.105.224.45:443 · franchisee.dev.workai.cloud
2026-01-23 09:39
HTTP/1.1 200 OK
Content-Length: 2423
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 09:39:55 GMT
Accept-Ranges: bytes
ETag: "1db839389081877"
Last-Modified: Thu, 20 Feb 2025 12:32:42 GMT
Set-Cookie: ARRAffinity=ffbca59b025949de884b4d868d5979b22329f43e038fd0828f4548a11a1dec35;Path=/;HttpOnly;Secure;Domain=franchisee.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=ffbca59b025949de884b4d868d5979b22329f43e038fd0828f4548a11a1dec35;Path=/;HttpOnly;SameSite=None;Secure;Domain=franchisee.dev.workai.cloud
Strict-Transport-Security: max-age=2592000
<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="/_nuxt/entry.c488b222.css">
<link rel="modulepreload" as="script" crossorigin href="/_nuxt/entry.a6fd3572.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/default.f2f682fa.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/AntdIcon.7141107c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.8c537936.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.a845b1e8.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/nuxt-link.aa6b17ba.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.4b288d6c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/public.e2b061b9.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/style.317a6326.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/config.836ddad5.js">
<link rel="prefetch" as="style" href="/_nuxt/error-404.7fc72018.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-404.d9d696a3.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/_plugin-vue_export-helper.c27b6911.js">
<link rel="prefetch" as="style" href="/_nuxt/error-500.c5df6088.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-500.d08df9e9.js">
<script type="module" src="/_nuxt/entry.a6fd3572.js" crossorigin></script></head>
<body ><div id="__nuxt"></div><script type="application/json" id="__NUXT_DATA__" data-ssr="false">[{"_errors":1,"serverRendered":2,"data":3,"state":4},{},false,{},{}]</script>
<script>window.__NUXT__={};window.__NUXT__.config={public:{identity:{authorityUrl:"https://identity.dev.workai.cloud/",clientId:"franchisee.panel",clientScope:"openid profile email elastic.intranet elastic.services.identity elastic.services.content elastic.services.notifications elastic.services.addressbook elastic.services.users elastic.services.organizations elastic.services.tasks elastic.services.licensing offline_access elastic.services.social workai.tasks elastic.services.files franchisee.panel elastic.services.usersprofile"},baseApiUrl:"https://franchisee.dev.workai.cloud",userProfileUrl:"https://usersprofile.dev.workai.cloud",i18n:{experimental:{jsTsFormatResource:false},baseUrl:"",locales:{}}},app:{baseURL:"/",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script></body>
</html>
Open service 20.105.224.45:443 · franchisee.dev.workai.cloud
2026-01-09 13:42
HTTP/1.1 200 OK
Content-Length: 2423
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 13:43:52 GMT
Accept-Ranges: bytes
ETag: "1db839389081877"
Last-Modified: Thu, 20 Feb 2025 12:32:42 GMT
Set-Cookie: ARRAffinity=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;Secure;Domain=franchisee.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;SameSite=None;Secure;Domain=franchisee.dev.workai.cloud
Strict-Transport-Security: max-age=2592000
<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="/_nuxt/entry.c488b222.css">
<link rel="modulepreload" as="script" crossorigin href="/_nuxt/entry.a6fd3572.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/default.f2f682fa.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/AntdIcon.7141107c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.8c537936.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.a845b1e8.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/nuxt-link.aa6b17ba.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.4b288d6c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/public.e2b061b9.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/style.317a6326.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/config.836ddad5.js">
<link rel="prefetch" as="style" href="/_nuxt/error-404.7fc72018.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-404.d9d696a3.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/_plugin-vue_export-helper.c27b6911.js">
<link rel="prefetch" as="style" href="/_nuxt/error-500.c5df6088.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-500.d08df9e9.js">
<script type="module" src="/_nuxt/entry.a6fd3572.js" crossorigin></script></head>
<body ><div id="__nuxt"></div><script type="application/json" id="__NUXT_DATA__" data-ssr="false">[{"_errors":1,"serverRendered":2,"data":3,"state":4},{},false,{},{}]</script>
<script>window.__NUXT__={};window.__NUXT__.config={public:{identity:{authorityUrl:"https://identity.dev.workai.cloud/",clientId:"franchisee.panel",clientScope:"openid profile email elastic.intranet elastic.services.identity elastic.services.content elastic.services.notifications elastic.services.addressbook elastic.services.users elastic.services.organizations elastic.services.tasks elastic.services.licensing offline_access elastic.services.social workai.tasks elastic.services.files franchisee.panel elastic.services.usersprofile"},baseApiUrl:"https://franchisee.dev.workai.cloud",userProfileUrl:"https://usersprofile.dev.workai.cloud",i18n:{experimental:{jsTsFormatResource:false},baseUrl:"",locales:{}}},app:{baseURL:"/",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script></body>
</html>
Open service 20.105.224.45:443 · franchisee.dev.workai.cloud
2026-01-02 19:26
HTTP/1.1 200 OK
Content-Length: 2423
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 19:26:19 GMT
Accept-Ranges: bytes
ETag: "1db839389081877"
Last-Modified: Thu, 20 Feb 2025 12:32:42 GMT
Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=franchisee.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=franchisee.dev.workai.cloud
Strict-Transport-Security: max-age=2592000
<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="/_nuxt/entry.c488b222.css">
<link rel="modulepreload" as="script" crossorigin href="/_nuxt/entry.a6fd3572.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/default.f2f682fa.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/AntdIcon.7141107c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.8c537936.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.a845b1e8.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/nuxt-link.aa6b17ba.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.4b288d6c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/public.e2b061b9.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/style.317a6326.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/config.836ddad5.js">
<link rel="prefetch" as="style" href="/_nuxt/error-404.7fc72018.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-404.d9d696a3.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/_plugin-vue_export-helper.c27b6911.js">
<link rel="prefetch" as="style" href="/_nuxt/error-500.c5df6088.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-500.d08df9e9.js">
<script type="module" src="/_nuxt/entry.a6fd3572.js" crossorigin></script></head>
<body ><div id="__nuxt"></div><script type="application/json" id="__NUXT_DATA__" data-ssr="false">[{"_errors":1,"serverRendered":2,"data":3,"state":4},{},false,{},{}]</script>
<script>window.__NUXT__={};window.__NUXT__.config={public:{identity:{authorityUrl:"https://identity.dev.workai.cloud/",clientId:"franchisee.panel",clientScope:"openid profile email elastic.intranet elastic.services.identity elastic.services.content elastic.services.notifications elastic.services.addressbook elastic.services.users elastic.services.organizations elastic.services.tasks elastic.services.licensing offline_access elastic.services.social workai.tasks elastic.services.files franchisee.panel elastic.services.usersprofile"},baseApiUrl:"https://franchisee.dev.workai.cloud",userProfileUrl:"https://usersprofile.dev.workai.cloud",i18n:{experimental:{jsTsFormatResource:false},baseUrl:"",locales:{}}},app:{baseURL:"/",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script></body>
</html>
Open service 20.105.224.45:443 · franchisee.dev.workai.cloud
2025-12-25 00:06
HTTP/1.1 200 OK
Content-Length: 2423
Connection: close
Content-Type: text/html
Date: Thu, 25 Dec 2025 00:06:18 GMT
Accept-Ranges: bytes
ETag: "1db839389081877"
Last-Modified: Thu, 20 Feb 2025 12:32:42 GMT
Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=franchisee.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=franchisee.dev.workai.cloud
Strict-Transport-Security: max-age=2592000
<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="/_nuxt/entry.c488b222.css">
<link rel="modulepreload" as="script" crossorigin href="/_nuxt/entry.a6fd3572.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/default.f2f682fa.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/AntdIcon.7141107c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.8c537936.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.a845b1e8.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/nuxt-link.aa6b17ba.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.4b288d6c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/public.e2b061b9.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/style.317a6326.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/config.836ddad5.js">
<link rel="prefetch" as="style" href="/_nuxt/error-404.7fc72018.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-404.d9d696a3.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/_plugin-vue_export-helper.c27b6911.js">
<link rel="prefetch" as="style" href="/_nuxt/error-500.c5df6088.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-500.d08df9e9.js">
<script type="module" src="/_nuxt/entry.a6fd3572.js" crossorigin></script></head>
<body ><div id="__nuxt"></div><script type="application/json" id="__NUXT_DATA__" data-ssr="false">[{"_errors":1,"serverRendered":2,"data":3,"state":4},{},false,{},{}]</script>
<script>window.__NUXT__={};window.__NUXT__.config={public:{identity:{authorityUrl:"https://identity.dev.workai.cloud/",clientId:"franchisee.panel",clientScope:"openid profile email elastic.intranet elastic.services.identity elastic.services.content elastic.services.notifications elastic.services.addressbook elastic.services.users elastic.services.organizations elastic.services.tasks elastic.services.licensing offline_access elastic.services.social workai.tasks elastic.services.files franchisee.panel elastic.services.usersprofile"},baseApiUrl:"https://franchisee.dev.workai.cloud",userProfileUrl:"https://usersprofile.dev.workai.cloud",i18n:{experimental:{jsTsFormatResource:false},baseUrl:"",locales:{}}},app:{baseURL:"/",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script></body>
</html>
Open service 20.105.224.45:443 · franchisee.dev.workai.cloud
2025-12-23 04:44
HTTP/1.1 200 OK
Content-Length: 2423
Connection: close
Content-Type: text/html
Date: Tue, 23 Dec 2025 04:44:57 GMT
Accept-Ranges: bytes
ETag: "1db839389081877"
Last-Modified: Thu, 20 Feb 2025 12:32:42 GMT
Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=franchisee.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=franchisee.dev.workai.cloud
Strict-Transport-Security: max-age=2592000
<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="/_nuxt/entry.c488b222.css">
<link rel="modulepreload" as="script" crossorigin href="/_nuxt/entry.a6fd3572.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/default.f2f682fa.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/AntdIcon.7141107c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.8c537936.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.a845b1e8.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/nuxt-link.aa6b17ba.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/index.4b288d6c.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/public.e2b061b9.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/style.317a6326.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/config.836ddad5.js">
<link rel="prefetch" as="style" href="/_nuxt/error-404.7fc72018.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-404.d9d696a3.js">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/_plugin-vue_export-helper.c27b6911.js">
<link rel="prefetch" as="style" href="/_nuxt/error-500.c5df6088.css">
<link rel="prefetch" as="script" crossorigin href="/_nuxt/error-500.d08df9e9.js">
<script type="module" src="/_nuxt/entry.a6fd3572.js" crossorigin></script></head>
<body ><div id="__nuxt"></div><script type="application/json" id="__NUXT_DATA__" data-ssr="false">[{"_errors":1,"serverRendered":2,"data":3,"state":4},{},false,{},{}]</script>
<script>window.__NUXT__={};window.__NUXT__.config={public:{identity:{authorityUrl:"https://identity.dev.workai.cloud/",clientId:"franchisee.panel",clientScope:"openid profile email elastic.intranet elastic.services.identity elastic.services.content elastic.services.notifications elastic.services.addressbook elastic.services.users elastic.services.organizations elastic.services.tasks elastic.services.licensing offline_access elastic.services.social workai.tasks elastic.services.files franchisee.panel elastic.services.usersprofile"},baseApiUrl:"https://franchisee.dev.workai.cloud",userProfileUrl:"https://usersprofile.dev.workai.cloud",i18n:{experimental:{jsTsFormatResource:false},baseUrl:"",locales:{}}},app:{baseURL:"/",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script></body>
</html>