GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37d96f14f55243bdde5a2735607dbce64a8cf2186
GraphQL introspection enabled at /graphql Types: 385 (by kind: ENUM: 28, INPUT_OBJECT: 91, INTERFACE: 20, OBJECT: 241, SCALAR: 5) Operations: - Query: Query | fields: availableStores, cart, categories, category, categoryList - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList Directives: deprecated, include, oneOf, skip (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2d562a70c2fd428505555046b706aa7dbea0f54c3
GraphQL introspection enabled at /graphql/api Types: 385 (by kind: ENUM: 28, INPUT_OBJECT: 91, INTERFACE: 20, OBJECT: 241, SCALAR: 5) Operations: - Query: Query | fields: availableStores, cart, categories, category, categoryList - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList Directives: deprecated, include, oneOf, skip (total: 4)
Open service 2.17.100.146:443 · stage.corpswag.com
2026-01-22 20:24
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 370 Expires: Thu, 22 Jan 2026 20:24:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 20:24:27 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1769113467912_34694350_241849123_22_10406_14_18_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://stage.corpswag.com/" on this server.<P> Reference #18.ce641102.1769113467.e6a5323 <P>https://errors.edgesuite.net/18.ce641102.1769113467.e6a5323</P> </BODY> </HTML>
Open service 2.17.100.146:443 · stage.corpswag.com
2026-01-08 20:49
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 372 Expires: Thu, 08 Jan 2026 20:49:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 20:49:08 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1767905348182_34694350_997240129_23_19082_83_97_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://stage.corpswag.com/" on this server.<P> Reference #18.ce641102.1767905348.3b70ad41 <P>https://errors.edgesuite.net/18.ce641102.1767905348.3b70ad41</P> </BODY> </HTML>
Open service 2.17.100.146:443 · stage.corpswag.com
2026-01-01 21:25
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 372 Expires: Thu, 01 Jan 2026 21:25:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 21:25:17 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1767302717085_34694286_1384094813_22_20372_12_29_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://stage.corpswag.com/" on this server.<P> Reference #18.8e641102.1767302717.527f9c5d <P>https://errors.edgesuite.net/18.8e641102.1767302717.527f9c5d</P> </BODY> </HTML>