Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549eb310bffbcade90f346cf10b9d81a7ad3e8796cf
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Pairs/devices/{deviceId}/shops/{shopId}
DELETE /api/Pairs/{shopDevicePairId}
GET /api/Health
GET /api/Notifications/current
GET /api/Pairs/device/{deviceTokenId}
GET /api/Pairs/shop/{shopId}
GET /api/Products/search/{pattern}
GET /api/Products/{reference}/picture
GET /api/QRCode/{shopId}
GET /api/QRCode/{shopId}/reset
GET /api/WarrantyCheck/{brandCode}/{id}
POST /api/Token/device
POST /api/Token/device/refresh
POST /api/transactional-data/manage-sellout
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549eb310bffbcade90f346cf10b9d81a7ad6484877f
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Pairs/devices/{deviceId}/shops/{shopId}
DELETE /api/Pairs/{shopDevicePairId}
GET /api/Health
GET /api/Notifications/current
GET /api/Pairs/device/{deviceTokenId}
GET /api/Pairs/shop/{shopId}
GET /api/Products/{brandCode}/search/{pattern}
GET /api/Products/{reference}/picture
GET /api/QRCode/{shopId}
GET /api/QRCode/{shopId}/reset
GET /api/WarrantyCheck/{brandCode}/{id}
POST /api/Token/device
POST /api/Token/device/refresh
POST /api/transactional-data/manage-sellout/device-id/{deviceId}
Open service 2a02:26f0:480:36::212:401c:443 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:fcd9eab7-e06f-4dd4-b841-e3c856579930 Expires: Wed, 07 Jan 2026 10:31:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:31:39 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2a02:26f0:480:36::212:4009:80 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:32:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:32:20 GMT Connection: close X-N: S
Open service 2.16.6.204:80 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:32:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:32:20 GMT Connection: close X-N: S
Open service 2.16.6.222:80 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:32:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:32:20 GMT Connection: close X-N: S
Open service 2a02:26f0:480:36::212:4009:443 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:fcd9eab7-e06f-4dd4-b841-e3c856579930 Expires: Wed, 07 Jan 2026 10:31:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:31:39 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2.16.6.204:443 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:fcd9eab7-e06f-4dd4-b841-e3c856579930 Expires: Wed, 07 Jan 2026 10:31:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:31:39 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 2a02:26f0:480:36::212:401c:80 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://konnector.swatchgroup.com/ Expires: Wed, 07 Jan 2026 10:32:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:32:19 GMT Connection: close X-N: S
Open service 2.16.6.222:443 · konnector.swatchgroup.com
2026-01-07 10:31
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:fcd9eab7-e06f-4dd4-b841-e3c856579930 Expires: Wed, 07 Jan 2026 10:31:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 10:31:39 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload