CWE-1230: Exposure of Sensitive Information Through Metadata
The product prevents direct access to a resource containing sensitive information, but it does not sufficiently limit access to metadata that is derived from the original, sensitive information.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- gitlab Exposure of Sensitive Information Through Metadata in GitLab 4.3 Medium
- qualcomm fastconnect 7800 firmware, qca7005 firmware, snapdragon ar1 gen 1 platform firmware +6 more +8 more Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware 6.5 Medium
- nextcloud tables, kiteworks security-advisories +1 more Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService 4.3 Medium
- apache activemq, activemq broker, apache software foundation activemq all +2 more Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire) 5.9 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 more HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. 3.5 Low
- tandoor recipes Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII 5.3 Medium
- siemens sinec security monitor A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The... 5.3 Medium
- opto 22 groov view server, grv-epic-pr1 firmware, grv-epic-pr2 firmware +2 more Opto 22 groov View Exposure of Sensitive Information Through Metadata 6.1 Medium
- cgm clininet Session ID leakage in Zone.Identifier of downloaded files 7.3 High
-
postgresqlAlmaLinux,libpqopenEuler,pgauditAlmaLinux +52 more +54 more PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table 3.1 Low - qualcomm qca7005 firmware, qualcomm, inc. snapdragon +1 more Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware 7.5 High
- dradisframework dradis In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about... 3.5 Low
- mybb MyBB may disclosure unviewable threads' titles in searches 5.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 more Exposure of Private API Keys in lunary-ai/lunary 8.8 High
- superagi, transformeroptimus transformeroptimus/superagi +1 more Exposure of Sensitive Information in transformeroptimus/superagi 6.5 Medium
- berriai berriai/litellm, litellm +1 more Exposure of Sensitive Information in berriai/litellm 7.5 High
- google chrome Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a... 6.5 Medium
- moodle Non-searchable tags can still be discovered on the tag search page and in the tags block 5.3 Medium
- rometheme romethemekit for elementor, rtmkit +1 more RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates 4.3 Medium
- arista ng firewall, arista networks edge threat management +1 more Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access 6.8 Medium
- dell nativeedge, nativeedge orchestrator +1 more Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through... 7.5 High
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 more Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block 5.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id 4.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 more Exposure of Sensitive Information in mintplex-labs/anything-llm 5.3 Medium
- joomunited wp meta seo WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description 5.3 Medium
- dell powerscale onefs Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A... 5.3 Medium
- answer, answerdev answerdev/answer +1 more Exposure of Sensitive Information Through Metadata in answerdev/answer 7.7 High