CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- tsplus remote accessInsecure permissions in TSplus Remote Access v17.30 allow attackers to retrieve a list of all...5.8 Medium
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability6.5 Medium
- greys korea for woocommerceWordPress Korea for WooCommerce plugin <= 1.1.11 - Sensitive Data Exposure vulnerability6.5 Medium
- dmitry v. (ceo of "ukr solution") barcode generator for woocommerceWordPress Barcode Generator for WooCommerce plugin <= 2.0.2 - Sensitive Data Exposure vulnerability6.5 Medium
- gradle enterpriseDevelocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access...8.3 High
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability5.3 Medium
- notfound wm options import exportWordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability7.5 High
- niket joshi wpdb to sqlWordPress WPDB to Sql plugin <= 1.2 - Sensitive Data Exposure vulnerability7.5 High
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure4.3 Medium
- cern indicoIndico Insecure Access0.0 None
- fortinet fortiosAn insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7...3.5 Low
- drupal file entity (fieldable files), file entity project entity +1 moreFile Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-0407.5 High
- wpspin post/page copying toolWordPress Post/Page Copying Tool plugin <= 2.0.0 - Sensitive Data Exposure vulnerability7.5 High
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.8.17.0 - Sensitive Data Exposure vulnerability5.3 Medium
- digital operation services wifiburadaImproper Authentication in Digital Operation Services' WiFiBurada4.3 Medium
- postboxWordPress PostBox plugin <= 1.0.4 - Sensitive Data Exposure vulnerability6.5 Medium
- brandtoss wp mailster, wpmailster +1 moreWordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability7.5 High
- cisco asyncos, secure email and web manager +1 moreCisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure Vulnerability4.3 Medium
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreExposure of Sensitive Information in lunary-ai/lunary9.1 Critical
- apache airflowApache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli4.9 Medium
- videowhisper contact forms, live support, crm, video messages, contact forms live support crm video messages plugin +1 moreWordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability7.5 High
- checkmkInformation leak in mknotifyd5.3 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data5.3 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data5.3 Medium
- emlog pro, gotenna pro app +1 moreInsertion of Sensitive Information Into Sent Data in goTenna Pro5.3 Medium
- circutor q-smt, q-smt firmware +1 moreInsertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMT8.0 High
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products5.7 Medium
- lightdashLightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat…7.3 High
- advanced varnish project varnish, drupal advanced varnish +1 moreAdvanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-0335.3 Medium
- anssi laitila shared filesWordPress Shared Files – Premium Download Manager & Secure File Sharing with Frontend File Upload plugin <= 1.7.28 - Sensitive Data Exposure vulnerability5.3 Medium
- jem-products order export for woocommerce, jem plugins order expert for woocommerce +1 moreWordPress Order Export for WooCommerce plugin <= 3.23 - Sensitive Data Exposure vulnerability5.3 Medium
- mediavine create, create by mediavine +1 moreWordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability5.3 Medium
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability5.3 Medium
- carazo import and export users and customersWordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability7.5 High
- plug&track sensor net connect v2, proges sensor net connect firmware v2 +1 moreA “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative...4.2 Medium
- coolkit ewelink, ewelink cloud service +1 moresharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user9.4 Critical
- trustedlogin, trustedlogin vendor +1 moreWordPress TrustedLogin Vendor plugin < 1.1.1 - Sensitive Data Exposure vulnerability5.3 Medium
- nodejs undiciUndici vulnerable to data leak when using response.arrayBuffer()2.0 Low
- pomeriumPomerium exposed OAuth2 access and ID tokens in user info endpoint response5.7 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreExposure of Sensitive Information in mintplex-labs/anything-llm5.3 Medium
- eg secure solutions inc. siteguard wp plugin, eg secure solutions siteguard +1 moreSiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php...5.3 Medium
- ethyca fidesSensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides6.5 Medium
- drupal image sizes, image sizes project sizes +1 moreImage Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-0237.5 High
- radiustheme shopbuilder – elementor woocommerce builder addonsWordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerability5.3 Medium
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order manager, ukrsolution barcode scanner and inventory manager +1 moreWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability5.3 Medium
- eclipse edc connector, eclipse foundation edc +1 moreEclipse EDC: OAuth2 Credential Exfiltration Vulnerability6.8 Medium
- drupal rest views, rest views project views +1 moreREST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-0187.5 High
- devitems ht megaWordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability4.3 Medium
- jack arturo wp fusion liteWordPress WP Fusion Lite plugin <= 3.42.10 - Sensitive Data Exposure vulnerability4.3 Medium
- Show moreLoading…