Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4925 matching apps · Counts below include only this page’s mapped finding types.
San Juan Country Club
axis_android.axis_android.SanJuanCountryClubBuild 26.268 · 2026-10-12 00:42 UTC2 matching categories · 2 matching occurrences
DMV Practice Test 2026 Easy Ed
com.thedvani.uspddBuild 2.0.7 · 2026-10-12 00:38 UTC2 matching categories · 2 matching occurrences
Smart Voice Recorder
com.andrwq.recorderBuild 13.3 · 2026-10-12 00:31 UTC2 matching categories · 2 matching occurrences
Cookpad recipes, homemade food
com.cookpad.android.activitiesBuild 26.41.0.2 · 2026-10-12 00:24 UTC2 matching categories · 3 matching occurrences
SmartHQ
com.ge.kitchenBuild 1.0.0.118.2 · 2026-10-12 00:23 UTC3 matching categories · 4 matching occurrences
StrikeBox: Sandbox&Shooter
com.chaloapps.shootersandboxBuild 2.2.994 · 2026-10-12 00:16 UTC1 matching category · 3 matching occurrences
AutoExpert - checking cars
ru.likemobile.checkautoBuild 20.54 · 2026-10-12 00:13 UTC3 matching categories · 6 matching occurrences
Jobright - AI Job Search
ai.jobright.orionBuild 1.16.0 · 2026-10-12 00:10 UTC1 matching category · 1 matching occurrence
Coin Identifier: Coin Value
com.beta.coin.identifier.identify.valueBuild 38.7.1 · 2026-10-12 00:06 UTC1 matching category · 1 matching occurrence
QR Code Reader: Scanner App
com.qr.code.barcode.scanner.language.translator.freeBuild 1.46 · 2026-10-12 00:05 UTC1 matching category · 3 matching occurrences
Rosetta Stone Classic (2024)
air.com.rosettastone.mobile.CoursePlayerBuild 9.2.3 · 2026-10-12 00:04 UTC2 matching categories · 5 matching occurrences
Photo Wobble Editor - Jellify
com.vacuapps.jellifyBuild 1.7.4 · 2026-10-12 00:02 UTC2 matching categories · 2 matching occurrences
The Chosen
net.comeandsee.thechosenBuild 4.5.0 · 2026-10-11 23:56 UTC1 matching category · 2 matching occurrences
Tile Club - Match Puzzle Games
com.gamovation.tileclubBuild 3.6.1 · 2026-10-11 23:54 UTC1 matching category · 1 matching occurrence
Animal Town - My Squirrel Home
com.iz.play.animal.town.pretend.squirrel.house.kidsBuild 3.5.0 · 2026-10-11 23:52 UTC2 matching categories · 7 matching occurrences
Fibu: Coding for Teens
com.learnprogramming.codecampBuild 2.8.0 · 2026-10-11 23:46 UTC2 matching categories · 4 matching occurrences
Habitica: Gamify Your Tasks
com.habitrpg.android.habiticaBuild 4.10.6 · 2026-10-11 23:45 UTC3 matching categories · 7 matching occurrences
Step Tracker - Pedometer
steptracker.healthandfitness.walkingtracker.pedometerBuild 1.7.1 · 2026-10-11 23:42 UTC2 matching categories · 2 matching occurrences
OYO: Hotel Booking App
com.oyo.consumerBuild 13.2.2 · 2026-10-11 23:41 UTC3 matching categories · 4 matching occurrences
Notes: Animal Life Widget
org.artsplanet.android.animallifememoBuild 2.36.21 · 2026-10-11 23:39 UTC2 matching categories · 2 matching occurrences
Hyper Hostess
com.funcell.hyperhostessBuild 5.1.0 · 2026-10-11 23:37 UTC3 matching categories · 3 matching occurrences
Global Guardian
com.globalalerting.globalguardianBuild 3.12.8 · 2026-10-11 23:35 UTC2 matching categories · 2 matching occurrences
bigbasket: Groceries and more
com.bigbasket.mobileappBuild 8.42.0 · 2026-10-11 23:29 UTC2 matching categories · 4 matching occurrences
URFitAP - Washtenaw
com.linkntech.washtenawBuild 3.1.0 · 2026-10-11 23:24 UTC1 matching category · 1 matching occurrence
Delhi Navigator
com.tilzmatictech.mobile.navigation.delhimetronavigatorBuild 12.1.3 · 2026-10-11 23:19 UTC2 matching categories · 3 matching occurrences