LeakIX - Host plugins-manager.jameda.de

Domain plugins-manager.jameda.de

United States

AMAZON-02

Software information

AmazonS3

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 18.66.192.23
Domain: plugins-manager.jameda.de
Port: 443
URL: https://plugins-manager.jameda.de

First seen 2025-11-10 00:56
Last seen 2026-01-09 05:53
Open for 60 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d601c207ba65bf5a0a12c599870df6c5e2162806225

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /sdk/delete_patient
DELETE /sdk/delete_pms_mappings/{pmsId}/{pmsEntityType}
GET /sdk/check_subscription_status
GET /sdk/doctor_basic_information
GET /sdk/doctor_contact_information
GET /sdk/doctor_profile_information
GET /sdk/facility_contact_information
GET /sdk/facility_doctor_information
GET /sdk/get_address_insurances
GET /sdk/get_busy_slots
GET /sdk/get_doctor_appointments
GET /sdk/get_doctor_appointments_extended
GET /sdk/get_doctor_appointments_for_pms
GET /sdk/get_insurances
GET /sdk/get_online_booked_appointments
GET /sdk/get_patient_appointments
GET /sdk/get_patient_appointments_date
GET /sdk/get_patient_requests
GET /sdk/get_plugin_installations
GET /sdk/get_pms_events_and_blocks
GET /sdk/get_pms_mapping
GET /sdk/get_pms_mappings
GET /sdk/get_pms_mappings_paginated
GET /sdk/get_prices_by_insurance
GET /sdk/get_request/{requestId}
GET /sdk/get_requests
GET /sdk/get_schedules
GET /sdk/get_service_base_dictionary
GET /sdk/get_services
GET /sdk/get_syncable_healthrecords
GET /sdk/get_visit
GET /sdk/get_visits_with_patient
GET /sdk/get_working_hours
GET /sdk/get_workperiod_service_insurances
GET /sdk/get_workperiods
GET /sdk/invoice
GET /sdk/invoices
GET /sdk/invoicing_entities
GET /sdk/patient_basic_information
GET /sdk/patient_contact_information
GET /sdk/patient_insurance_information
GET /sdk/patient_visit_information
GET /sdk/search_patient_by_basic_information
GET /sdk/search_patient_by_document
GET /sdk/search_patient_by_phone
GET /sdk/search_patient_by_reference_id
GET /sdk/token_info
GET /sdk/user_information
GET /sto/collections
GET /sto/collections/{collectionId}
GET /sto/collections/{collectionId}/documents
GET /sto/collections/{collectionId}/documents/{documentId}
POST /sdk/activate_user_schedule
POST /sdk/add_ehr_audit_logs
POST /sdk/add_event_audit_logs
POST /sdk/confirm_appointment
POST /sdk/create_block
POST /sdk/create_patient
POST /sdk/create_patient_raw
POST /sdk/create_stationary_appointment
POST /sdk/create_virtual_appointment
POST /sdk/deactivate_user_schedule
POST /sdk/delete_block
POST /sdk/delete_patient_file
POST /sdk/delete_pms_appointment
POST /sdk/delete_pms_mapping
POST /sdk/delete_pms_mappings
POST /sdk/delete_stationary_appointment
POST /sdk/delete_virtual_appointment
POST /sdk/get_doctor_appointments_for_pms_by_ids
POST /sdk/get_visits
POST /sdk/move_appointment
POST /sdk/notify_patient
POST /sdk/notify_user
POST /sdk/resolve_patient_request
POST /sdk/set_visit_as_paid
POST /sdk/set_visit_as_unpaid
POST /sdk/update_address_insurances
POST /sdk/update_patient
POST /sdk/update_patient_address
POST /sdk/update_patient_birthdate
POST /sdk/update_patient_email
POST /sdk/update_patient_fiscal_data
POST /sdk/update_patient_gender
POST /sdk/update_patient_name
POST /sdk/update_patient_nin
POST /sdk/update_patient_phone
POST /sdk/update_patient_reference_id
POST /sdk/update_request/{requestId}/resolution
POST /sdk/update_request/{requestId}/resolution/files/upload
POST /sdk/update_request_enabled_m2000
POST /sdk/update_working_hours
POST /sdk/upload_patient_file
POST /sdk/upsert_pms_appointment
POST /sdk/upsert_pms_mapping
POST /sdk/upsert_pms_mappings
POST /sdk/upsert_pms_patient
POST /sdk/upsert_pms_schedule_workperiods
POST /sto/collections/{collectionId}/fields
POST /track

Found on 2026-01-09 05:53

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d601c207ba65bf5a0a12c599870df6c5e21aa7e4482

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /sdk/delete_patient
DELETE /sdk/delete_pms_mappings/{pmsId}/{pmsEntityType}
GET /sdk/check_subscription_status
GET /sdk/doctor_basic_information
GET /sdk/doctor_contact_information
GET /sdk/doctor_profile_information
GET /sdk/facility_contact_information
GET /sdk/facility_doctor_information
GET /sdk/get_address_insurances
GET /sdk/get_busy_slots
GET /sdk/get_doctor_appointments
GET /sdk/get_doctor_appointments_extended
GET /sdk/get_doctor_appointments_for_pms
GET /sdk/get_insurances
GET /sdk/get_online_booked_appointments
GET /sdk/get_patient_appointments
GET /sdk/get_patient_appointments_date
GET /sdk/get_patient_requests
GET /sdk/get_plugin_installations
GET /sdk/get_pms_events_and_blocks
GET /sdk/get_pms_mapping
GET /sdk/get_pms_mappings
GET /sdk/get_pms_mappings_paginated
GET /sdk/get_prices_by_insurance
GET /sdk/get_requests
GET /sdk/get_schedules
GET /sdk/get_service_base_dictionary
GET /sdk/get_services
GET /sdk/get_syncable_healthrecords
GET /sdk/get_visit
GET /sdk/get_visits_with_patient
GET /sdk/get_working_hours
GET /sdk/get_workperiod_service_insurances
GET /sdk/get_workperiods
GET /sdk/invoice
GET /sdk/invoices
GET /sdk/invoicing_entities
GET /sdk/patient_basic_information
GET /sdk/patient_contact_information
GET /sdk/patient_insurance_information
GET /sdk/patient_visit_information
GET /sdk/search_patient_by_basic_information
GET /sdk/search_patient_by_document
GET /sdk/search_patient_by_phone
GET /sdk/search_patient_by_reference_id
GET /sdk/token_info
GET /sdk/user_information
GET /sto/collections
GET /sto/collections/{collectionId}
GET /sto/collections/{collectionId}/documents
GET /sto/collections/{collectionId}/documents/{documentId}
POST /sdk/activate_user_schedule
POST /sdk/add_ehr_audit_logs
POST /sdk/add_event_audit_logs
POST /sdk/confirm_appointment
POST /sdk/create_block
POST /sdk/create_patient
POST /sdk/create_patient_raw
POST /sdk/create_stationary_appointment
POST /sdk/create_virtual_appointment
POST /sdk/deactivate_user_schedule
POST /sdk/delete_block
POST /sdk/delete_patient_file
POST /sdk/delete_pms_appointment
POST /sdk/delete_pms_mapping
POST /sdk/delete_pms_mappings
POST /sdk/delete_stationary_appointment
POST /sdk/delete_virtual_appointment
POST /sdk/get_doctor_appointments_for_pms_by_ids
POST /sdk/get_visits
POST /sdk/move_appointment
POST /sdk/notify_patient
POST /sdk/notify_user
POST /sdk/resolve_patient_request
POST /sdk/set_visit_as_paid
POST /sdk/set_visit_as_unpaid
POST /sdk/update_address_insurances
POST /sdk/update_patient
POST /sdk/update_patient_address
POST /sdk/update_patient_birthdate
POST /sdk/update_patient_email
POST /sdk/update_patient_fiscal_data
POST /sdk/update_patient_gender
POST /sdk/update_patient_name
POST /sdk/update_patient_nin
POST /sdk/update_patient_phone
POST /sdk/update_patient_reference_id
POST /sdk/update_request_enabled_m2000
POST /sdk/update_working_hours
POST /sdk/upload_patient_file
POST /sdk/upsert_pms_appointment
POST /sdk/upsert_pms_mapping
POST /sdk/upsert_pms_mappings
POST /sdk/upsert_pms_patient
POST /sdk/upsert_pms_schedule_workperiods
POST /sto/collections/{collectionId}/fields
POST /track

Found on 2025-11-16 05:47

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d601c207ba65bf5a0a12c599870df6c5e212078edd7

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /sdk/delete_patient
DELETE /sdk/delete_pms_mappings/{pmsId}/{pmsEntityType}
GET /sdk/check_subscription_status
GET /sdk/doctor_basic_information
GET /sdk/doctor_contact_information
GET /sdk/doctor_profile_information
GET /sdk/facility_contact_information
GET /sdk/facility_doctor_information
GET /sdk/get_address_insurances
GET /sdk/get_busy_slots
GET /sdk/get_doctor_appointments
GET /sdk/get_doctor_appointments_extended
GET /sdk/get_doctor_appointments_for_pms
GET /sdk/get_insurances
GET /sdk/get_online_booked_appointments
GET /sdk/get_patient_appointments
GET /sdk/get_patient_appointments_date
GET /sdk/get_patient_requests
GET /sdk/get_plugin_installations
GET /sdk/get_pms_events_and_blocks
GET /sdk/get_pms_mapping
GET /sdk/get_pms_mappings
GET /sdk/get_pms_mappings_paginated
GET /sdk/get_prices_by_insurance
GET /sdk/get_schedules
GET /sdk/get_service_base_dictionary
GET /sdk/get_services
GET /sdk/get_syncable_healthrecords
GET /sdk/get_visit
GET /sdk/get_visits_with_patient
GET /sdk/get_working_hours
GET /sdk/get_workperiod_service_insurances
GET /sdk/get_workperiods
GET /sdk/invoice
GET /sdk/invoices
GET /sdk/invoicing_entities
GET /sdk/patient_basic_information
GET /sdk/patient_contact_information
GET /sdk/patient_insurance_information
GET /sdk/patient_visit_information
GET /sdk/search_patient_by_basic_information
GET /sdk/search_patient_by_document
GET /sdk/search_patient_by_phone
GET /sdk/search_patient_by_reference_id
GET /sdk/token_info
GET /sdk/user_information
GET /sto/collections
GET /sto/collections/{collectionId}
GET /sto/collections/{collectionId}/documents
GET /sto/collections/{collectionId}/documents/{documentId}
POST /sdk/activate_user_schedule
POST /sdk/add_ehr_audit_logs
POST /sdk/add_event_audit_logs
POST /sdk/confirm_appointment
POST /sdk/create_block
POST /sdk/create_patient
POST /sdk/create_patient_raw
POST /sdk/create_stationary_appointment
POST /sdk/create_virtual_appointment
POST /sdk/deactivate_user_schedule
POST /sdk/delete_block
POST /sdk/delete_patient_file
POST /sdk/delete_pms_appointment
POST /sdk/delete_pms_mapping
POST /sdk/delete_pms_mappings
POST /sdk/delete_stationary_appointment
POST /sdk/delete_virtual_appointment
POST /sdk/get_doctor_appointments_for_pms_by_ids
POST /sdk/get_visits
POST /sdk/move_appointment
POST /sdk/notify_patient
POST /sdk/notify_user
POST /sdk/resolve_patient_request
POST /sdk/set_visit_as_paid
POST /sdk/set_visit_as_unpaid
POST /sdk/update_address_insurances
POST /sdk/update_patient
POST /sdk/update_patient_address
POST /sdk/update_patient_birthdate
POST /sdk/update_patient_email
POST /sdk/update_patient_fiscal_data
POST /sdk/update_patient_gender
POST /sdk/update_patient_name
POST /sdk/update_patient_nin
POST /sdk/update_patient_phone
POST /sdk/update_patient_reference_id
POST /sdk/update_request_enabled_m2000
POST /sdk/update_working_hours
POST /sdk/upload_patient_file
POST /sdk/upsert_pms_appointment
POST /sdk/upsert_pms_mapping
POST /sdk/upsert_pms_mappings
POST /sdk/upsert_pms_patient
POST /sdk/upsert_pms_schedule_workperiods
POST /sto/collections/{collectionId}/fields
POST /track

Found on 2025-11-12 04:36

Create report

Open service 18.66.192.23:443 · plugins-manager.jameda.de

2026-01-09 05:53

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 09 Jan 2026 05:53:38 GMT
X-Content-Type-Options: nosniff
X-Request-Id: 989042a085dc8dad97d1c2ffabf7f1a7
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Cache: Miss from cloudfront
Via: 1.1 6ef87569c26a159f552948d3c30a2be0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ZYlWYukYKMs45zRFMznF5nnEB8l4EvPIJMheVMWHJBFCun-t6A_jnQ==

Page title: Plugins - Docplanner



<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Plugins - Docplanner</title>

    
    
    

    <link rel="stylesheet" href="/css/dp-ui-kit.css" />
    <link rel="stylesheet" href="/css/dashboard.css" />

    <link href="//fonts.googleapis.com/css?family=Work+Sans:400,600" rel="stylesheet" />
    <link href="//fonts.googleapis.com/css?family=Roboto:400,500,700" rel="stylesheet" />

    

</head>
<body>

     <header class="dashboard-header">
    <nav role="navigation" class="navbar navbar-dark navbar-expand-md bg-gray-900 mb-2">
        <a class="navbar-brand" href="/">
            <img src="/img/logos/logo-dp-dev.svg" alt="Doctoralia logo" />
        </a>
        <div class="collapse navbar-collapse">
            <ul class="navbar-nav mr-auto">
                <li class="navbar-nav mr-auto ">
                    <a class="nav-link" data-test-id="nav-link-my-plugins" href="/plugin">My Plugins</a>
                </li>
            </ul>
            
    <ul class="nav navbar-nav navbar-right">
        <li class="nav-item ">
            <a class="nav-link" href="/identity/account/register">Register</a>
        </li>
        <li class="nav-item ">
            <a class="nav-link" href="/identity/account/login">Login</a>
        </li>
    </ul>

        </div>
    </nav>
</header>


    <div>
        


        <main role="main" class="pb-3">
            
<div class="container">
    <div class="row display-flex flex-xs-column align-items-center">
        <div class="col-md-5">
            <h1>Build useful tools for millions of users</h1>
            <p class="text-muted">Help us make the health experience more human by adding useful functionalities to our Docplanner platform used my millions of doctors and patients around the globe.</p>
            <a href="/plugin/create" class="btn btn-primary">
                Create your first plugin
            </a>
        </div>
        <div class="col-md-7 padding-left-1 padding-right-1 text-center">
            <img src="/img/illustrations/ilu-action-calendar-booking-visit-check.svg" />
        </div>
    </div>
</div>

<hr class="offset-top-5 offset-bottom-5" />

<div class="container">
    <div class="row display-flex align-items-center flex-xs-column">
        <div class="col-md-7 padding-left-1 padding-right-1 text-center">
            <img style="max-height: 300px" src="/img/illustrations/illu-people-doctor-profile-add.svg" />
        </div>
        <div class="col-md-5">
            <h2>How it works?</h2>
            <p class="text-muted">Extend and customize the functionality of Docplanner in a simple way using our API and integrate your product or application with Docplanner. </p>
            <a target="_blank" class="btn btn-status-primary" href="/documentation">
                View documentation
            </a>
        </div>

    </div>
</div>





        </main>
    </div>

    
    
        <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js" crossorigin="anonymous" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=">
        </script>
<script>(window.jQuery||document.write("\u003Cscript src=\u0022/lib/jquery/dist/jquery.min.js\u0022 crossorigin=\u0022anonymous\u0022 integrity=\u0022sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=\u0022\u003E\u003C/script\u003E"));</script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js" crossorigin="anonymous" integrity="sha384-xrRywqdh3PHs8keKZN+8zzc5TX0GRTLCcmivcbNJWm2rs5C8PRhcEn3czEjhAO9o">
        </script>
<script>(window.jQuery && window.jQuery.fn && window.jQuery.fn.modal||document.write("\u003Cscript src=\u0022/lib/bootstrap/dist/js/bootstrap.bundle.min.js\u0022 crossorigin=\u0022anonymous\u0022 integrity=\u0022sha384-xrRywqdh3PHs8keKZN\u002B8zzc5TX0GRTLCcmivcbNJWm2rs5C8PRhcEn3czEjhAO9o\u0022\u003E\u003C/script\u003E"));</script>
    
    <script src="/js/site.js?v=gNYz8Lh4t2VEUAy-FDCNhPb6lG7habNrJVwNR3wgprg"></script>

    
</body>

Found 2026-01-09 by HttpPlugin

Domain plugins-manager.jameda.de

United States

Software information

Swagger API description is publicly available

jameda.de*.jameda.deapi.widgets.jameda.de

Domain summary

IP summary