Domain gate-booking-partner-dev.pathecinemas.com
Germany
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
IP: 2.16.183.108
Domain: gate-booking-partner-dev.pathecinemas.com
Port: 443
URL: https://gate-booking-partner-dev.pathecinemas.comFirst seen 2025-11-18 12:50
Last seen 2025-11-22 21:57
Open for 4 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60d2f110e081615d2789e201ff24845cf66d5f1ebePublic Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /v1/cinema/country/{country}/cinemasWithGate GET /v1/externalbooking/externalBookingId/{id} POST /v1/externalbooking/Privatization/ListbyCinemas POST /v1/externalbooking/add POST /v1/externalbooking/cinemas/{cinemaId}/cancel POST /v1/externalbooking/externalBookingId/{Id}/delete POST /v1/externalbooking/externalBookingId/{id}/update POST /v1/externalbookinguser/addFound on 2025-11-22 21:57
-