Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4927 matching apps · Counts below include only this page’s mapped finding types.
SmartLife: Smart Living
com.tuya.smartlifeBuild 7.11.6 · 2026-10-11 22:04 UTC2 matching categories · 2 matching occurrences
Resume Builder Pro with AI
app.uncaughtexception.snapresume2Build 4.9.1 · 2026-10-11 21:59 UTC2 matching categories · 3 matching occurrences
여보야 - 결혼, 재혼을 위한 중매쟁이 앱
com.yeoboya.com.yeoboyaBuild 1.5.454 · 2026-10-11 21:57 UTC2 matching categories · 2 matching occurrences
Hidden Objects Game: Find & Go
com.gurupuzzle.find.go.hidden.objectsBuild 1.9.0 · 2026-10-11 21:53 UTC1 matching category · 4 matching occurrences
Tinyview Comics
com.newput.tinyviewBuild 11.9.544 · 2026-10-11 21:51 UTC2 matching categories · 4 matching occurrences
Scream Hero Dash
com.saratigames.ScreamHeroDashBuild 1.3.1 · 2026-10-11 21:50 UTC1 matching category · 1 matching occurrence
Call Blocker - Phone - ID
com.cuiet.blockCallsBuild 8.1.5 · 2026-10-11 21:44 UTC2 matching categories · 4 matching occurrences
88 Fortunes™ Casino Slot Games
com.ballytechnologies.f88Build 4.32.00 · 2026-10-11 21:42 UTC3 matching categories · 3 matching occurrences
Banco Azteca Guatemala
gt.com.bancoazteca.bancadigitalBuild 1.1.21 · 2026-10-11 21:40 UTC2 matching categories · 2 matching occurrences
Northmill Bank
com.northmill.rebillaBuild 2.72.0 · 2026-10-11 21:32 UTC3 matching categories · 24 matching occurrences
Habit Check Calendar
com.weeklychecklistBuild 7.40.0 · 2026-10-11 21:31 UTC2 matching categories · 3 matching occurrences
Pet Shop Fever: Animal Hotel
com.tapps.virtual.pet.hotel.games.worldBuild 2.36 · 2026-10-11 21:29 UTC3 matching categories · 4 matching occurrences
Sweatcoin・Walking Step Counter
in.sweatco.appBuild 257.1.1 · 2026-10-11 21:22 UTC3 matching categories · 3 matching occurrences
Dayuse: Hotel rooms by day
com.dayuse_hotels.dayuseusBuild 8.8.0 · 2026-10-11 21:20 UTC4 matching categories · 7 matching occurrences
Lang Kingdom - Best At English
com.langkingdom.langkingdomBuild 6.0.7 · 2026-10-11 21:18 UTC4 matching categories · 10 matching occurrences
Goods Puzzle: Sort Challenge™
com.fc.goods.sort.matching.puzzle.triplemasterBuild 5.40 · 2026-10-11 21:14 UTC2 matching categories · 2 matching occurrences
Doc Sign - Sign & Fill Doc Pdf
org.docScanner.pdf2img.img2pdfBuild 1.0.120 · 2026-10-11 21:04 UTC1 matching category · 1 matching occurrence
BurgerFi
com.olo.burgerfiBuild 2025.8.5 · 2026-10-11 21:03 UTC3 matching categories · 3 matching occurrences
Budget Planner & App: Spendee
com.cleevio.spendeeBuild 6.0.9 · 2026-10-11 21:01 UTC2 matching categories · 4 matching occurrences
Pluxee Brasil
com.primety.sodexomobileBuild 14.0.61 · 2026-10-11 20:59 UTC2 matching categories · 2 matching occurrences
CamScanner- scanner, PDF maker
com.intsig.camscannerBuild 7.26.5.2609160000 · 2026-10-11 20:54 UTC3 matching categories · 22 matching occurrences
The General Insurance® App
com.pgac.general.droidBuild 8.2.0 · 2026-10-11 20:48 UTC1 matching category · 2 matching occurrences
OnStar Dealer Rewards
air.com.maritz.onstarRewardsBuild 4.3.1 · 2026-10-11 20:46 UTC1 matching category · 3 matching occurrences
2026 Calendar Launcher
com.calendarlauncher.calendar.agenda.planner.schedule.events.androidBuild 2.21.0 · 2026-10-11 20:44 UTC2 matching categories · 15 matching occurrences
Charleston Battery
com.sportinginnovations.uslchsBuild 1.3.18 · 2026-10-11 20:41 UTC2 matching categories · 2 matching occurrences