Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4793 matching apps · Counts below include only this page’s mapped finding types.
SMART Certification
com.ResusciTech.SMARTCertificationBuild 3.3.43 · 2026-10-13 13:38 UTC2 matching categories · 3 matching occurrences
TipSee: Tip & Income Tracker
com.wcd.tipseeBuild 1.11.418` · 2026-10-13 13:36 UTC3 matching categories · 3 matching occurrences
URFitAP - West Wood
com.linkntech.westwoodBuild 3.1.0 · 2026-10-13 13:31 UTC1 matching category · 1 matching occurrence
CKO Kickboxing
com.netpulse.mobile.ckokickboxingBuild 1.35 · 2026-10-13 13:27 UTC4 matching categories · 8 matching occurrences
Fooda
com.vokal.foodaBuild 8.12.39880 · 2026-10-13 13:25 UTC2 matching categories · 2 matching occurrences
ChowNow: Local Food Ordering
com.chownow.discoverBuild 1.71.0 · 2026-10-13 13:22 UTC2 matching categories · 3 matching occurrences
94.1 WHRP
com.airkast.WHRPFMBuild 9.0.5 · 2026-10-13 13:20 UTC2 matching categories · 2 matching occurrences
Lịch Vạn Niên 2026 - Lịch Âm
com.zegome.app.lichvannienBuild 12.2609.21 · 2026-10-13 13:18 UTC2 matching categories · 2 matching occurrences
United Federal Credit Union
com.q2e.unitedfcu5017android.ufcu.uwnmobileBuild 25.6.0 · 2026-10-13 13:12 UTC2 matching categories · 3 matching occurrences
Diwali Greetings Card Maker
diwali.greetings.makerBuild 9.0 · 2026-10-13 13:11 UTC2 matching categories · 4 matching occurrences
China Wok El Salvador
com.chinawokapp.svBuild 1.0.22 · 2026-10-13 13:09 UTC1 matching category · 1 matching occurrence
LDI
events.grip.ldishowBuild 10.34.5.4958 · 2026-10-13 13:08 UTC2 matching categories · 6 matching occurrences
Liberty Trust and Savings Bank
com.libertytrustsb.mobileBuild 26.1.20 · 2026-10-13 13:07 UTC1 matching category · 1 matching occurrence
Gospel Flix-Christian Movie,AI
com.gospelflix.streamBuild 8025.JesusIsLord · 2026-10-13 13:03 UTC2 matching categories · 2 matching occurrences
Verificador de Precios
mx.jsdesign.pricecheckerBuild 1.7 · 2026-10-13 13:02 UTC2 matching categories · 2 matching occurrences
ChackTok -Photobooth Event App
com.youfan.chacktokBuild 1.9.5 · 2026-10-13 13:00 UTC1 matching category · 1 matching occurrence
Wicked Clothes
co.tapcart.app.id_cFH3g4xvQvBuild 41 · 2026-10-13 12:57 UTC3 matching categories · 3 matching occurrences
ABG Smart Mobile
com.abg.fismobileBuild 26.08.00 · 2026-10-13 12:55 UTC2 matching categories · 2 matching occurrences
أدعية الحج 1447
com.ad3iyatManasik.hajjBuild 8.0 · 2026-10-13 12:54 UTC1 matching category · 1 matching occurrence
Sunrise Community Church
io.pushpay.sunrisecommunityBuild 15.7.0 · 2026-10-13 12:53 UTC1 matching category · 1261 matching occurrences
Debt Payoff Planner & Tracker
com.oxbowsoft.debtplannerBuild 2.54 · 2026-10-13 12:50 UTC2 matching categories · 2 matching occurrences
Newport Cliff Walk Audio Tour
com.actiontourguide.cliffwalkBuild 15.3 · 2026-10-13 12:49 UTC2 matching categories · 4 matching occurrences
Goppert FB Mobile Banking
com.csiweb.digitalbanking.bk0474Build 26.6.1 · 2026-10-13 12:47 UTC4 matching categories · 7 matching occurrences
petrolcard business
com.keepwarning.monobrandBuild 2.5.0 · 2026-10-13 12:45 UTC1 matching category · 1 matching occurrence
Bentonville West Wolverines
com.sidelineaccess.bwhsBuild 6.8.0 · 2026-10-13 12:44 UTC3 matching categories · 3 matching occurrences