Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549311352c30f7a5003b7bb87a892998493f9c982db
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AuthCheck
GET /api/File/{shareRefNo}/{fileId}
GET /api/Settings/languageSettings
GET /api/Share/{shareRefNo}
GET /service/Health/ping
Open service 13.80.19.74:443 · shareinv25tc-sharing.nidemo.com
2026-01-23 07:31
HTTP/1.1 200 OK Content-Length: 686 Connection: close Content-Type: text/html Date: Fri, 23 Jan 2026 07:32:11 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate ETag: "1db5cff73655eae" Expires: -1 Last-Modified: Thu, 02 Jan 2025 10:16:56 GMT Pragma: no-cache Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:e1cf18a2-d74d-4279-9950-6ef065fa4b55 Referrer-Policy: no-referrer X-Frame-Options: Deny X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;font-src 'self' data:;form-action 'self';frame-ancestors 'self';upgrade-insecure-requests;block-all-mixed-content Page title: Criminal Justice Portal <!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>Criminal Justice Portal</title><script defer="defer" src="/js/chunk-vendors.ba53f5c8.js"></script><script defer="defer" src="/js/app.c4dfb421.js"></script><link href="/css/chunk-vendors.51a718c5.css" rel="stylesheet"><link href="/css/app.ba06086a.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but Criminal Justice Portal doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
Open service 13.80.19.74:443 · shareinv25tc-sharing.nidemo.com
2026-01-09 11:06
HTTP/1.1 200 OK Content-Length: 686 Connection: close Content-Type: text/html Date: Fri, 09 Jan 2026 11:07:26 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate ETag: "1db5cff73655eae" Expires: -1 Last-Modified: Thu, 02 Jan 2025 10:16:56 GMT Pragma: no-cache Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:e1cf18a2-d74d-4279-9950-6ef065fa4b55 Referrer-Policy: no-referrer X-Frame-Options: Deny X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;font-src 'self' data:;form-action 'self';frame-ancestors 'self';upgrade-insecure-requests;block-all-mixed-content Page title: Criminal Justice Portal <!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>Criminal Justice Portal</title><script defer="defer" src="/js/chunk-vendors.ba53f5c8.js"></script><script defer="defer" src="/js/app.c4dfb421.js"></script><link href="/css/chunk-vendors.51a718c5.css" rel="stylesheet"><link href="/css/app.ba06086a.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but Criminal Justice Portal doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
Open service 13.80.19.74:80 · shareinv25tc-sharing.nidemo.com
2026-01-02 17:24
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Fri, 02 Jan 2026 17:24:30 GMT Location: https://shareinv25tc-sharing.nidemo.com/
Open service 13.80.19.74:443 · shareinv25tc-sharing.nidemo.com
2026-01-02 17:24
HTTP/1.1 200 OK Content-Length: 686 Connection: close Content-Type: text/html Date: Fri, 02 Jan 2026 17:24:30 GMT Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate ETag: "1db5cff73655eae" Expires: -1 Last-Modified: Thu, 02 Jan 2025 10:16:56 GMT Pragma: no-cache Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:e1cf18a2-d74d-4279-9950-6ef065fa4b55 Referrer-Policy: no-referrer X-Frame-Options: Deny X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;font-src 'self' data:;form-action 'self';frame-ancestors 'self';upgrade-insecure-requests;block-all-mixed-content Page title: Criminal Justice Portal <!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>Criminal Justice Portal</title><script defer="defer" src="/js/chunk-vendors.ba53f5c8.js"></script><script defer="defer" src="/js/app.c4dfb421.js"></script><link href="/css/chunk-vendors.51a718c5.css" rel="stylesheet"><link href="/css/app.ba06086a.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but Criminal Justice Portal doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>