How I scanned dev.to APIs for vulnerabilities

I recently saw the dev.to published an update on their REST APIs.

https://developers.forem.com/api

I became curious, and I wanted to scan the Dev.to REST API for basic vulnerabilities.

I used a free and web-based API security tool for this job.

https://apisec-inc.github.io/pentest/

Here are the scan results

Surprisingly it reported 8 issues. Here is the list:

I analyzed the dev.to web UI to find out what was happening. I quickly figured out all the open endpoints were also open on the …

api apis dev node security testing vulnerabilities