Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4796 matching apps · Counts below include only this page’s mapped finding types.

Access Bank Zambia

com.mode.atlasmaraBuild 1.58 · 2026-10-13 12:06 UTC

1 matching category · 1 matching occurrence

B · 86/100Static analysis complete

What Would Joel Do App

com.theexotech.wwjdBuild 2.2.3 · 2026-10-13 12:04 UTC

2 matching categories · 4 matching occurrences

A · 91/100Static analysis complete

Stack Ball - Crash Platforms

com.azurgames.stackballBuild 1.2.42 · 2026-10-13 12:01 UTC

3 matching categories · 3 matching occurrences

B · 89/100Static analysis complete

Corporate Banking

com.warbabank.cobBuild 3.1.3 · 2026-10-13 11:59 UTC

1 matching category · 2 matching occurrences

A · 97/100Static analysis complete

Lensy لينزي

com.safacs.lensyappBuild 2.2.2 · 2026-10-13 11:57 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

OSIM uDivine V

com.osim.udivinevBuild 1.2.0 · 2026-10-13 11:54 UTC

2 matching categories · 2 matching occurrences

D · 36/100Static analysis complete

Write in Runic (Runes writer)

net.blackenvelope.writeinrunicBuild 3.6.6-runic · 2026-10-13 11:53 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Video Trimmer, Merger & Joiner

com.stcodesapp.video_trimmer_video_cutterBuild 1.2.7 · 2026-10-13 11:52 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

Unicorn Pull the Pin Puzzle

com.mtsfreegames.unicorn.pull.the.pin.puzzleBuild 1.0.0 · 2026-10-13 11:46 UTC

2 matching categories · 3 matching occurrences

B · 78/100Static analysis complete

One Swissport

com.socialchorus.df.android.googleplayBuild 26.5.1 · 2026-10-13 11:42 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

HBC Bolivar

com.subsplashconsulting.s_3JM65NBuild 6.23.4 · 2026-10-13 11:40 UTC

3 matching categories · 3 matching occurrences

A · 94/100Static analysis complete

Frontwave Mobile Banking

com.pmcu.pmcuBuild 4022.1.2 · 2026-10-13 11:37 UTC

2 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Show TV - Watch Series & TV

cbg.android.showtvBuild 6.6.0 · 2026-10-13 11:36 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Doll Dress Up: DIY Doll Maker

com.doll.maker.avatar.creatorBuild 1.4 · 2026-10-13 11:30 UTC

2 matching categories · 2 matching occurrences

D · 43/100Static analysis complete

Quill Flow: AI Voice Keyboard

com.flowstudios.quillflowBuild 1.1.8 · 2026-10-13 11:28 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

OpenTimeClock2

com.opentimeclock.phone2Build 3.3.1 · 2026-10-13 11:26 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

St. George Events

com.app.testfvwBuild 1 · 2026-10-13 11:22 UTC

3 matching categories · 5 matching occurrences

D · 39/100Static analysis complete

No PMO - Quit Addiction

com.noobapps.NoMoreFapBuild 2.5.3 · 2026-10-13 11:19 UTC

2 matching categories · 4 matching occurrences

A · 91/100Static analysis complete

Mandria: Fantasy Stories

com.matsur.mandriastoriesBuild 1.0.2 · 2026-10-13 11:16 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Employee PrideNet

com.simpplr.cb.creditBuild 7.4.0 · 2026-10-13 11:15 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

Remembery – Memory game pairs

ua.krou.rememberyBuild 1.3.12 · 2026-10-13 11:13 UTC

2 matching categories · 3 matching occurrences

A · 97/100Static analysis complete

Holy Quran: Al Quran Mp3

com.free.alquran.holyquran.quranpakBuild 1.8.7 · 2026-10-13 11:12 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Love Embroidery Magazine

com.im.loveembroideryBuild 8.12 · 2026-10-13 11:09 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Southern Pet Lodge -Williamson

com.pawzlove.android.southern_pet_lodgeBuild 1.15.0 · 2026-10-13 11:05 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete