Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfe8f4b98aca9f4f571121e1bb70b35f944b1fcc8
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /health
GET /health/group/{group}
GET /infra/health
GET /infra/health/group/{group}
GET /infra/ready
GET /infra/ready/group/{group}
GET /service-status
GET /service-status/{metric-name}
POST /v3/photos/diner
POST /v3/photos/restaurant
POST /v3/photos/review
Open service 104.126.37.168:443 · media-upload.opentable.com
2026-01-09 15:30
HTTP/1.1 404 Not Found
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
OT-RequestId: 28db8717-d0ab-446d-b2e4-d7bd41974f33
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 87776
Date: Fri, 09 Jan 2026 15:30:47 GMT
Connection: close
Set-Cookie: otuvid=7E832C42-E0CC-44A4-904E-DF6983F4E807; Path=/; Domain=opentable.com; Max-Age=31536000; Expires=Sat, 09 Jan 2027 15:30:46 GMT; Secure; SameSite=None
Page title: OpenTable
<!DOCTYPE html>
<html lang="en" class="wf-franklingothicurw-n4-active wf-franklingothicurw-n5-active wf-franklingothicurw-n7-active wf-franklingothicurw-n3-active wf-active">
<head id="Head1">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<base href=".">
<meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
<title>OpenTable</title>
<style type="text/css">
/*! normalize.css v3.0.0 | MIT License | git.io/normalize */
html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%} body {margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html input[type="button"],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}input{line-height:normal}input[type="checkbox"],input[type="radio"]{box-sizing:border-box;padding:0}input[type="number"]::-webkit-inner-spin-button,input[type="number"]::-webkit-outer-spin-button{height:auto}input[type="search"]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}input[type="search"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{font-weight:bold}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}*,*:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html,body{height:100%}body{font-family:"franklin-gothic-urw",Arial,"Helvetica Neue",Helvetica,sans-serif;font-size:100%;font-weight:normal;font-style:normal;padding:0;margin:0;line-height:1;position:relative;cursor:default;background:#e0ddda;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}html:lang(ja) body{font-family:"?????? ProN W3","Hiragino Kaku Gothic ProN",Roboto,"Droid Sans","?????",YuGothic,"????",Meiryo,sans-serif}a:hover{cursor:pointer}img{max-width:100%;height:auto;-ms-interpolation-mode:bicubic;display:inline-block;vertical-align:middle}.gm-style img{max-width:none}.left{float:left!important}.right{float:right!important}.hide{display:none}.show{display:inherit}.list-left{*zoom:1}.list-left:before,.list-left:after{content:" ";display:table}.list-left:after{clear:both}.list-left>li{float:left;margin-right:1rem}.line-height{line-height:1.2em}.line-height-large{line-height:1.5em}.cf,.clearfix{*zoom:1}.cf:before,.cf:after,.clearfix:before,.clearfix:after{content:" ";display:table}.cf:after,.clearfix:after{clear:both}.no-wrap{white-space:nowrap}pre{overflow:visible}ul,li{margin:0;padding:0;list-style:none}input{color:#000}textarea{height:auto;min-height:50px}select{width:100%}label{-webkit-touch-callout:none;user-select:none}.master-container{background:#f7f7f7}.master-container.hide-footer{padding-bottom:0!important}.master-container.hide-footer .footer-container{display:none}.max-width-wrapper{max-width:64rem;position:relative}@media only screen and (min-width:64.0625em){.master-conta
Open service 104.126.37.168:443 · media-upload.opentable.com
2026-01-02 10:55
HTTP/1.1 404 Not Found
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
OT-RequestId: e068297b-b6f4-45f6-a7f6-3f237234615c
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 87776
Date: Fri, 02 Jan 2026 10:55:02 GMT
Connection: close
Set-Cookie: otuvid=1F4B23FE-35EA-429B-8A43-79D13CB98221; Path=/; Domain=opentable.com; Secure; SameSite=None
Page title: OpenTable
<!DOCTYPE html>
<html lang="en" class="wf-franklingothicurw-n4-active wf-franklingothicurw-n5-active wf-franklingothicurw-n7-active wf-franklingothicurw-n3-active wf-active">
<head id="Head1">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<base href=".">
<meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
<title>OpenTable</title>
<style type="text/css">
/*! normalize.css v3.0.0 | MIT License | git.io/normalize */
html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%} body {margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html input[type="button"],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}input{line-height:normal}input[type="checkbox"],input[type="radio"]{box-sizing:border-box;padding:0}input[type="number"]::-webkit-inner-spin-button,input[type="number"]::-webkit-outer-spin-button{height:auto}input[type="search"]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}input[type="search"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{font-weight:bold}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}*,*:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html,body{height:100%}body{font-family:"franklin-gothic-urw",Arial,"Helvetica Neue",Helvetica,sans-serif;font-size:100%;font-weight:normal;font-style:normal;padding:0;margin:0;line-height:1;position:relative;cursor:default;background:#e0ddda;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}html:lang(ja) body{font-family:"?????? ProN W3","Hiragino Kaku Gothic ProN",Roboto,"Droid Sans","?????",YuGothic,"????",Meiryo,sans-serif}a:hover{cursor:pointer}img{max-width:100%;height:auto;-ms-interpolation-mode:bicubic;display:inline-block;vertical-align:middle}.gm-style img{max-width:none}.left{float:left!important}.right{float:right!important}.hide{display:none}.show{display:inherit}.list-left{*zoom:1}.list-left:before,.list-left:after{content:" ";display:table}.list-left:after{clear:both}.list-left>li{float:left;margin-right:1rem}.line-height{line-height:1.2em}.line-height-large{line-height:1.5em}.cf,.clearfix{*zoom:1}.cf:before,.cf:after,.clearfix:before,.clearfix:after{content:" ";display:table}.cf:after,.clearfix:after{clear:both}.no-wrap{white-space:nowrap}pre{overflow:visible}ul,li{margin:0;padding:0;list-style:none}input{color:#000}textarea{height:auto;min-height:50px}select{width:100%}label{-webkit-touch-callout:none;user-select:none}.master-container{background:#f7f7f7}.master-container.hide-footer{padding-bottom:0!important}.master-container.hide-footer .footer-container{display:none}.max-width-wrapper{max-width:64rem;position:relative}@media only screen and (min-width:64.0625em){.master-conta
Open service 104.126.37.168:443 · media-upload.opentable.com
2025-12-23 03:02
HTTP/1.1 404 Not Found
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
OT-RequestId: 51b5d7c4-06c3-41d9-9d62-bd62aedbf72b
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 87776
Date: Tue, 23 Dec 2025 03:02:46 GMT
Connection: close
Set-Cookie: otuvid=D145D332-FC2B-489F-A7AC-C369EC1C74AD; Path=/; Domain=opentable.com; Secure; SameSite=None
Page title: OpenTable
<!DOCTYPE html>
<html lang="en" class="wf-franklingothicurw-n4-active wf-franklingothicurw-n5-active wf-franklingothicurw-n7-active wf-franklingothicurw-n3-active wf-active">
<head id="Head1">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<base href=".">
<meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
<title>OpenTable</title>
<style type="text/css">
/*! normalize.css v3.0.0 | MIT License | git.io/normalize */
html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%} body {margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html input[type="button"],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}input{line-height:normal}input[type="checkbox"],input[type="radio"]{box-sizing:border-box;padding:0}input[type="number"]::-webkit-inner-spin-button,input[type="number"]::-webkit-outer-spin-button{height:auto}input[type="search"]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}input[type="search"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{font-weight:bold}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}*,*:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html,body{height:100%}body{font-family:"franklin-gothic-urw",Arial,"Helvetica Neue",Helvetica,sans-serif;font-size:100%;font-weight:normal;font-style:normal;padding:0;margin:0;line-height:1;position:relative;cursor:default;background:#e0ddda;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}html:lang(ja) body{font-family:"?????? ProN W3","Hiragino Kaku Gothic ProN",Roboto,"Droid Sans","?????",YuGothic,"????",Meiryo,sans-serif}a:hover{cursor:pointer}img{max-width:100%;height:auto;-ms-interpolation-mode:bicubic;display:inline-block;vertical-align:middle}.gm-style img{max-width:none}.left{float:left!important}.right{float:right!important}.hide{display:none}.show{display:inherit}.list-left{*zoom:1}.list-left:before,.list-left:after{content:" ";display:table}.list-left:after{clear:both}.list-left>li{float:left;margin-right:1rem}.line-height{line-height:1.2em}.line-height-large{line-height:1.5em}.cf,.clearfix{*zoom:1}.cf:before,.cf:after,.clearfix:before,.clearfix:after{content:" ";display:table}.cf:after,.clearfix:after{clear:both}.no-wrap{white-space:nowrap}pre{overflow:visible}ul,li{margin:0;padding:0;list-style:none}input{color:#000}textarea{height:auto;min-height:50px}select{width:100%}label{-webkit-touch-callout:none;user-select:none}.master-container{background:#f7f7f7}.master-container.hide-footer{padding-bottom:0!important}.master-container.hide-footer .footer-container{display:none}.max-width-wrapper{max-width:64rem;position:relative}@media only screen and (min-width:64.0625em){.master-conta