CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- wp messiah ai copilotWordPress WP AI CoPilot plugin <= 1.2.7 - Sensitive Data Exposure vulnerability4.3 Medium
- infinitum form geo controllerWordPress Geo Controller plugin <= 8.9.4 - Sensitive Data Exposure vulnerability5.3 Medium
- yawkat lz4-javayawkat LZ4 Java has a possible information leak in Java safe decompressor8.2 High
- apache http serverApache HTTP Server: Server Side Includes adds query string to #exec cmd=...8.3 High
- argus technology inc. bilgerSensitive Data Exposure in ArgusTech's BILGER7.5 High
- google android, mediatek, inc. mt6781, mt6833, mt6853, mt6877, mt6893, mt8196 +1 moreIn GPU pdma, there is a possible information disclosure due to a missing bounds check. This could...4.4 Medium
- getgrav gravGrav Exposes Password Hashes Leading to privilege escalation6.2 Medium
- angular, siemens ruggedcom rst2428p, sidis prime +2 moreAngular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs7.7 High
- getsentry sentry-javascriptSentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`5.1 Medium
- secuavail logstare collector, logstare inc. collector (for linux), collector (for windows) +2 moreLogStare Collector improperly handles the password hash data. An administrative user may obtain...6.9 Medium
- hcl software connectionsHCL Connections is vulnerable to sensitive information disclosure3.5 Low
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab4.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab4.3 Medium
- directusDirectus's conceal fields are searchable if read permissions enabled6.5 Medium
- apache openofficeApache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables5.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Speech Recognition Information Disclosure Vulnerability5.5 Medium
- parse-community parse-serverParse Server allows public `explain` queries which may expose sensitive database performance information and schema details6.9 Medium
- ays pro ai chatbot with chatgpt and content generator by aysWordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability7.5 High
- hamastar technology meetinghubWordPress MeetingHub plugin <= 1.23.9 - Sensitive Data Exposure vulnerability6.5 Medium
- vito peleg atarimWordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability7.5 High
- mantisbtMantisBT: Authentication bypass for some passwords due to PHP type juggling5.4 Medium
- rank math seo math seoWordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability4.3 Medium
- airesvsg acf to rest apiWordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability5.3 Medium
- publitioWordPress Publitio plugin <= 2.2.5 - Sensitive Data Exposure vulnerability5.0 Medium
- vito peleg atarimWordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability5.3 Medium
- themeruby easy post submissionWordPress Easy Post Submission plugin <= 1.7.0 - Sensitive Data Exposure vulnerability5.3 Medium
- blockspareWordPress Blockspare plugin <= 3.2.13.2 - Sensitive Data Exposure vulnerability4.3 Medium
- presstigers simple job boardWordPress Simple Job Board plugin <= 2.13.7 - Sensitive Data Exposure vulnerability7.5 High
- wpdesk shopmagicWordPress ShopMagic plugin <= 4.5.6 - Sensitive Data Exposure vulnerability5.8 Medium
- inkthemes wp gmail smtpWordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Data Exposure vulnerability5.8 Medium
- saad iqbal appexpertsWordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability5.8 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility vulnerability6.9 Medium
- fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 moreA insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through...4.2 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal exposes sensitive user data through its Freemarker template4.6 Medium
- vimesoft information technologies and software inc. corporate messaging platformInformation Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform5.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab7.7 High
- thetechtribe the tribalWordPress The Tribal Plugin <= 1.3.3 - Sensitive Data Exposure Vulnerability5.3 Medium
- themelooks foodbookWordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure Vulnerability5.3 Medium
- benjamin intal stackableWordPress Stackable Plugin <= 3.18.1 - Sensitive Data Exposure Vulnerability4.3 Medium
- maciej bis permalink manager liteWordPress Permalink Manager Lite Plugin <= 2.5.1.3 - Sensitive Data Exposure Vulnerability7.5 High
- wordpressWordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and DXP audit events record password reminder answers6.9 Medium
- coordinadora mercantil s.a. envíos coordinadora woocommerceWordPress Envíos Coordinadora Woocommerce plugin <= 1.1.32 - Sensitive Data Exposure vulnerability5.3 Medium
- ideal postcodes uk address postcode validationWordPress UK Address Postcode Validation plugin <= 3.9.2 - Sensitive Data Exposure vulnerability5.3 Medium
- iberezansky 3d flipbook – pdf flipbook viewer, flipbook image galleryWordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.16.16 - Sensitive Data Exposure Vulnerability5.3 Medium
- themeum qubelyWordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exposure Vulnerability4.3 Medium
- jetmonsters getwidWordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability4.3 Medium
- syed balkhi all in one seo packWordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure Vulnerability4.3 Medium
- argus technology inc. bilgerInformation Disclosure in ArgusTech's BILGER6.5 Medium
- premiumbizthemes simple price calculatorWordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability6.5 Medium
- Show moreLoading…