Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 20.50.2.50:443 · stag.app.solaflex.com
2026-01-23 12:59
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 12:59:39 GMT Server: Kestrel Location: /index.html Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:adfdc904-ca84-4571-afde-99e02dd8f08c Content-Security-Policy: frame-ancestors 'self' https://shop.ceraflex.at https://ceraflex.stag.interad.at https://ceraflex.test.interad.at X-Correlation-Id: 8f74bdd60f31401a8e46127d542dea66
Open service 20.50.2.50:443 · stag.app.solaflex.com
2026-01-10 11:45
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Sat, 10 Jan 2026 11:46:21 GMT Server: Kestrel Location: /index.html Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:adfdc904-ca84-4571-afde-99e02dd8f08c Content-Security-Policy: frame-ancestors 'self' https://shop.ceraflex.at https://ceraflex.stag.interad.at https://ceraflex.test.interad.at X-Correlation-Id: f70f150caf54471b89089e0da39ee453
Open service 20.50.2.50:80 · stag.app.solaflex.com
2026-01-10 11:45
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sat, 10 Jan 2026 11:46:21 GMT Location: https://stag.app.solaflex.com/