Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035490c3204c4bd284a5ac12632e047a039db60642e19
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: DELETE /Alarm/delete GET /Alarm/detail GET /Alarm/getAlarmsBySiloId GET /Animal/all GET /ApplicationUser/alarm GET /ApplicationUser/all GET /ApplicationUser/getUserInfo GET /ApplicationUser/me GET /Customer/all GET /Farm/all GET /Farm/detail GET /Farm/getFarmDropDownList GET /Farm/getFarmMaps GET /Feed/all GET /Order/all GET /Role/all GET /Sensor/getSensorMeasures GET /Sensor/getSensorsBySiloId GET /Silo/getSiloAlarms GET /Silo/getSiloInfo GET /Silo/getSiloMeasures GET /Silo/getSilosByFarmId GET /Vendor/all GET /api/Health POST /Alarm/save POST /ApplicationUser/changePassword POST /ApplicationUser/delete POST /ApplicationUser/save POST /ApplicationUser/sendEmailTest POST /ApplicationUser/sendSMSTest POST /ApplicationUser/update POST /Customer/save POST /Farm/create POST /Farm/update POST /Farm/updateCustomerId POST /Sensor/save POST /Silo/create POST /Silo/update POST /login POST /resetPassword POST /sendResetPasswordLink
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035490c3204c4bd284a5ac12632e047a039db60642e19
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: DELETE /Alarm/delete GET /Alarm/detail GET /Alarm/getAlarmsBySiloId GET /Animal/all GET /ApplicationUser/alarm GET /ApplicationUser/all GET /ApplicationUser/getUserInfo GET /ApplicationUser/me GET /Customer/all GET /Farm/all GET /Farm/detail GET /Farm/getFarmDropDownList GET /Farm/getFarmMaps GET /Feed/all GET /Order/all GET /Role/all GET /Sensor/getSensorMeasures GET /Sensor/getSensorsBySiloId GET /Silo/getSiloAlarms GET /Silo/getSiloInfo GET /Silo/getSiloMeasures GET /Silo/getSilosByFarmId GET /Vendor/all GET /api/Health POST /Alarm/save POST /ApplicationUser/changePassword POST /ApplicationUser/delete POST /ApplicationUser/save POST /ApplicationUser/sendEmailTest POST /ApplicationUser/sendSMSTest POST /ApplicationUser/update POST /Customer/save POST /Farm/create POST /Farm/update POST /Farm/updateCustomerId POST /Sensor/save POST /Silo/create POST /Silo/update POST /login POST /resetPassword POST /sendResetPasswordLink
Open service 20.50.2.68:443 · silosensor-api.deheus-apps.com
2026-01-22 21:14
HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Thu, 22 Jan 2026 21:15:27 GMT
x-ms-forbidden-ip: 165.227.39.235
Page title: Web App - Unavailable
<!DOCTYPE html>
<html>
<head>
<title>Web App - Unavailable</title>
<style type="text/css">
html {
height: 100%;
width: 100%;
}
#feature {
width: 960px;
margin: 95px auto 0 auto;
overflow: auto;
}
#content {
font-family: "Segoe UI";
font-weight: normal;
font-size: 22px;
color: #ffffff;
float: left;
width: 460px;
margin-top: 68px;
margin-left: 0px;
vertical-align: middle;
}
#content h1 {
font-family: "Segoe UI Light";
color: #ffffff;
font-weight: normal;
font-size: 60px;
line-height: 48pt;
width: 800px;
}
p a, p a:visited, p a:active, p a:hover {
color: #ffffff;
}
#content a.button {
background: #0DBCF2;
border: 1px solid #FFFFFF;
color: #FFFFFF;
display: inline-block;
font-family: Segoe UI;
font-size: 24px;
line-height: 46px;
margin-top: 10px;
padding: 0 15px 3px;
text-decoration: none;
}
#content a.button img {
float: right;
padding: 10px 0 0 15px;
}
#content a.button:hover {
background: #1C75BC;
}
</style>
</head>
<body bgcolor="#00abec">
<div id="feature">
<div id="content">
<h1 id="unavailable">Error 403 - Forbidden</h1>
<p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
</div>
</div>
</body>
</html>
Open service 20.50.2.68:80 · silosensor-api.deheus-apps.com
2026-01-22 20:14
HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Thu, 22 Jan 2026 20:15:18 GMT
x-ms-forbidden-ip: 138.68.82.23
Page title: Web App - Unavailable
<!DOCTYPE html>
<html>
<head>
<title>Web App - Unavailable</title>
<style type="text/css">
html {
height: 100%;
width: 100%;
}
#feature {
width: 960px;
margin: 95px auto 0 auto;
overflow: auto;
}
#content {
font-family: "Segoe UI";
font-weight: normal;
font-size: 22px;
color: #ffffff;
float: left;
width: 460px;
margin-top: 68px;
margin-left: 0px;
vertical-align: middle;
}
#content h1 {
font-family: "Segoe UI Light";
color: #ffffff;
font-weight: normal;
font-size: 60px;
line-height: 48pt;
width: 800px;
}
p a, p a:visited, p a:active, p a:hover {
color: #ffffff;
}
#content a.button {
background: #0DBCF2;
border: 1px solid #FFFFFF;
color: #FFFFFF;
display: inline-block;
font-family: Segoe UI;
font-size: 24px;
line-height: 46px;
margin-top: 10px;
padding: 0 15px 3px;
text-decoration: none;
}
#content a.button img {
float: right;
padding: 10px 0 0 15px;
}
#content a.button:hover {
background: #1C75BC;
}
</style>
</head>
<body bgcolor="#00abec">
<div id="feature">
<div id="content">
<h1 id="unavailable">Error 403 - Forbidden</h1>
<p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
</div>
</div>
</body>
</html>