Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6c8b45670200f5874f98b1b9d40dee56b53c4ccab
GraphQL introspection enabled at /api/graphql Types: 157 (by kind: ENUM: 15, INPUT_OBJECT: 67, INTERFACE: 9, OBJECT: 57, SCALAR: 9) Operations: - Query: Query | fields: auditEvents, dataProcessingActivities, node, personSearch, persons - Mutation: Mutation | fields: createCourse, createPerson, deletePerson, updateCourse, updatePerson Directives: deprecated, include, skip (total: 3)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6c8b45670200f5874f98b1b9d40dee56b53c4ccab
GraphQL introspection enabled at /api/graphql Types: 157 (by kind: ENUM: 15, INPUT_OBJECT: 67, INTERFACE: 9, OBJECT: 57, SCALAR: 9) Operations: - Query: Query | fields: auditEvents, dataProcessingActivities, node, personSearch, persons - Mutation: Mutation | fields: createCourse, createPerson, deletePerson, updateCourse, updatePerson Directives: deprecated, include, skip (total: 3)
Open service 75.2.43.161:80 · staging.api.admin.kdgh.de
2026-01-09 17:34
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 17:35:07 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5kEZAlaJhul4QospNsdRnpfOBaFmTTGcdF9Q09Ivcmk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767980107"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5kEZAlaJhul4QospNsdRnpfOBaFmTTGcdF9Q09Ivcmk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767980107"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2026-01-09T17:35:07.186+00:00","status":404,"error":"Not Found","path":"/"}
Open service 99.83.217.1:443 · staging.api.admin.kdgh.de
2026-01-09 05:14
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 05:14:42 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=OF2YyDTo2%2BwT4PbO5LReJz0zc%2Bj6OSlbMMHNsfvQ3W0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767935682"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=OF2YyDTo2%2BwT4PbO5LReJz0zc%2Bj6OSlbMMHNsfvQ3W0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767935682"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2026-01-09T05:14:42.575+00:00","status":404,"error":"Not Found","path":"/"}
Open service 75.2.43.161:80 · staging.api.admin.kdgh.de
2026-01-02 23:08
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 23:08:32 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=nQqQbkFHoA92wgoU20tpx1tqMSdsw0HwEg1QfA8O1iI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767395312"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=nQqQbkFHoA92wgoU20tpx1tqMSdsw0HwEg1QfA8O1iI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767395312"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2026-01-02T23:08:32.363+00:00","status":404,"error":"Not Found","path":"/"}
Open service 99.83.217.1:443 · staging.api.admin.kdgh.de
2026-01-02 05:24
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 05:24:57 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=dpiTiDdn%2BQGAtx3%2BuvQA2sXoxTJNd4z71Af90nsIMhU%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767331496"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=dpiTiDdn%2BQGAtx3%2BuvQA2sXoxTJNd4z71Af90nsIMhU%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767331496"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2026-01-02T05:24:57.661+00:00","status":404,"error":"Not Found","path":"/"}
Open service 75.2.43.161:80 · staging.api.admin.kdgh.de
2025-12-30 10:12
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Tue, 30 Dec 2025 10:12:26 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MIGKX%2Bg0z2SOK7gy1vNlLhz1iDIqPzzWDDjkR5AWni0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767089546"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MIGKX%2Bg0z2SOK7gy1vNlLhz1iDIqPzzWDDjkR5AWni0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767089546"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2025-12-30T10:12:26.782+00:00","status":404,"error":"Not Found","path":"/"}
Open service 75.2.43.161:80 · staging.api.admin.kdgh.de
2025-12-23 03:50
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Tue, 23 Dec 2025 03:50:52 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=m0km6Mp%2FhQ2Js4bdziCK58%2FWFH8fPMRYvYuraDXmy%2Fw%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766461852"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=m0km6Mp%2FhQ2Js4bdziCK58%2FWFH8fPMRYvYuraDXmy%2Fw%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766461852"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2025-12-23T03:50:52.884+00:00","status":404,"error":"Not Found","path":"/"}
Open service 75.2.43.161:80 · staging.api.admin.kdgh.de
2025-12-21 10:33
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 21 Dec 2025 10:33:13 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J5dZp04xT0koc2tfTB74LsaYNtiD9iKYnSpnc9xQoAE%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766313193"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J5dZp04xT0koc2tfTB74LsaYNtiD9iKYnSpnc9xQoAE%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766313193"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2025-12-21T10:33:13.294+00:00","status":404,"error":"Not Found","path":"/"}
Open service 99.83.217.1:443 · staging.api.admin.kdgh.de
2025-12-20 11:23
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sat, 20 Dec 2025 11:23:31 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fIbOxYnHqvdA0Yh4jUcktWFlgDW4xqDp0W8UzLC8SvA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766229811"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fIbOxYnHqvdA0Yh4jUcktWFlgDW4xqDp0W8UzLC8SvA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766229811"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 89
Connection: close
{"timestamp":"2025-12-20T11:23:31.420+00:00","status":404,"error":"Not Found","path":"/"}