How a single 'temporary' debug token exposed an entire distributed network.

How to use SSRF for a local network reconnaissance and which impacts have this vulnerability

A simple API test turned into a full dashboard failure in under few minutes. No exploits, no hacks , just a missing limit.

During testing, I discovered that the test environment's Swagger UI at https://[test-api-domain]/swagger/index.html is fully accessible to anyone on the internet without any authentication. This endpoint returns a complete OpenAPI/Swagger specification containing all API endpoints, request/response schemas, data models, and internal architecture details.