Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff4398d2977ecacbfd2d0feb40696cb0a7b310790054
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /uerre/{correo}
GET /uerre/{id}/clase
GET /uerre/{pidm}/clase/{crn}/periodo/{term}
GET /uerre/{pidm}/clase/{crn}/periodo/{term}/fecha/{fecha}/horario/{horario}
GET /uerre/{pidm}/clase/{crn}/periodo/{term}/horario/{begin_time}
GET /unid/{correo}
GET /unid/{id}/clase
GET /unid/{pidm}/clase/{crn}/periodo/{term}
GET /unid/{pidm}/clase/{crn}/periodo/{term}/fecha/{fecha}/horario/{horario}
GET /unid/{pidm}/clase/{crn}/periodo/{term}/horario/{begin_time}
Open service 52.71.181.166:443 · api-dev.talisis.com
2026-01-22 19:33
HTTP/1.1 404 Not Found Date: Thu, 22 Jan 2026 19:33:38 GMT Content-Type: text/html Content-Length: 146 Connection: close Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 52.71.181.166:443 · api-dev.talisis.com
2026-01-09 19:04
HTTP/1.1 200 OK Date: Fri, 09 Jan 2026 19:04:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13 Connection: close X-Powered-By: Express ETag: W/"d-mwQEm6Cy27TqIhAT3IACiZKpaMc" "Hello world"
Open service 52.71.181.166:443 · api-dev.talisis.com
2026-01-01 22:25
HTTP/1.1 200 OK Date: Thu, 01 Jan 2026 22:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13 Connection: close X-Powered-By: Express ETag: W/"d-mwQEm6Cy27TqIhAT3IACiZKpaMc" "Hello world"