Host · tessellatepay.com · Production · criticality A
404 · Not found · London · AWS eu-west-2 · 2 open issues, 1 proven exploitable · first seen 2 Sep · last scanned Mon 12 Oct · scanning now, since 10:19
CVE-2024-34351 · confirmed by our own template · api.tessellatepay.com
Proven on api.tessellatepay.com: our template made your server call out to us. An attacker can use the API server to reach internal services, including the AWS metadata endpoint that hands out credentials. Kelvin's rescan, running since 10:19, will tell whether this morning's release closed it.
What to fix on it first
2 issues · ranked by proof, then exploitation in the wild, then severity
Proven exploitable · 1
Everything else, worst first · 1
Gone since Mon 5 Oct · 1 fixed
Who gets its findings, and how much it matters
Owner routes findings · criticality moves them up the queue
What it's for
What customers use
Criticality
Money moves or customer data lives here
Tags
What answers, from where, running what
As the last finished scan saw it
On the web
How it meets the internet
Straight onto the internet
Its own address answers. Whatever it runs, attackers reach directly.
Runs
What it offers anyone who asks
Open ports, the headers its pages send, the routes we know
Ports
Headers
64 routes known: 64 API routes, and an OpenAPI spec
Explore them