Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549311352c30f7a5003b7bb87a892998493f9c982db
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AuthCheck
GET /api/File/{shareRefNo}/{fileId}
GET /api/Settings/languageSettings
GET /api/Share/{shareRefNo}
GET /service/Health/ping
Open service 13.80.19.74:443 · shareinv24tc-sharing.nidemo.com
2026-01-22 22:56
HTTP/1.1 200 OK Content-Length: 686 Connection: close Content-Type: text/html Date: Thu, 22 Jan 2026 22:57:16 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate ETag: "1dc180a2728daae" Expires: -1 Last-Modified: Thu, 28 Aug 2025 10:54:40 GMT Pragma: no-cache Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:e1cf18a2-d74d-4279-9950-6ef065fa4b55 Referrer-Policy: no-referrer X-Frame-Options: Deny X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;font-src 'self' data:;form-action 'self';frame-ancestors 'self';upgrade-insecure-requests;block-all-mixed-content Page title: Criminal Justice Portal <!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>Criminal Justice Portal</title><script defer="defer" src="/js/chunk-vendors.49afcf54.js"></script><script defer="defer" src="/js/app.bd152606.js"></script><link href="/css/chunk-vendors.51a718c5.css" rel="stylesheet"><link href="/css/app.603162b7.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but Criminal Justice Portal doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
Open service 13.80.19.74:443 · shareinv24tc-sharing.nidemo.com
2026-01-09 22:36
HTTP/1.1 200 OK Content-Length: 686 Connection: close Content-Type: text/html Date: Fri, 09 Jan 2026 22:37:31 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate ETag: "1dc180a2728daae" Expires: -1 Last-Modified: Thu, 28 Aug 2025 10:54:40 GMT Pragma: no-cache Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:e1cf18a2-d74d-4279-9950-6ef065fa4b55 Referrer-Policy: no-referrer X-Frame-Options: Deny X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;font-src 'self' data:;form-action 'self';frame-ancestors 'self';upgrade-insecure-requests;block-all-mixed-content Page title: Criminal Justice Portal <!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>Criminal Justice Portal</title><script defer="defer" src="/js/chunk-vendors.49afcf54.js"></script><script defer="defer" src="/js/app.bd152606.js"></script><link href="/css/chunk-vendors.51a718c5.css" rel="stylesheet"><link href="/css/app.603162b7.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but Criminal Justice Portal doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
Open service 13.80.19.74:80 · shareinv24tc-sharing.nidemo.com
2026-01-05 15:23
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Mon, 05 Jan 2026 15:23:46 GMT Location: https://shareinv24tc-sharing.nidemo.com/
Open service 13.80.19.74:443 · shareinv24tc-sharing.nidemo.com
2026-01-05 15:23
HTTP/1.1 200 OK Content-Length: 686 Connection: close Content-Type: text/html Date: Mon, 05 Jan 2026 15:23:46 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate ETag: "1dc180a2728daae" Expires: -1 Last-Modified: Thu, 28 Aug 2025 10:54:40 GMT Pragma: no-cache Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:e1cf18a2-d74d-4279-9950-6ef065fa4b55 Referrer-Policy: no-referrer X-Frame-Options: Deny X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;font-src 'self' data:;form-action 'self';frame-ancestors 'self';upgrade-insecure-requests;block-all-mixed-content Page title: Criminal Justice Portal <!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>Criminal Justice Portal</title><script defer="defer" src="/js/chunk-vendors.49afcf54.js"></script><script defer="defer" src="/js/app.bd152606.js"></script><link href="/css/chunk-vendors.51a718c5.css" rel="stylesheet"><link href="/css/app.603162b7.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but Criminal Justice Portal doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>