Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4796 matching apps · Counts below include only this page’s mapped finding types.

Unicorn Pull the Pin Puzzle

com.mtsfreegames.unicorn.pull.the.pin.puzzleBuild 1.0.0 · 2026-10-13 11:46 UTC

2 matching categories · 3 matching occurrences

B · 78/100Static analysis complete

One Swissport

com.socialchorus.df.android.googleplayBuild 26.5.1 · 2026-10-13 11:42 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

HBC Bolivar

com.subsplashconsulting.s_3JM65NBuild 6.23.4 · 2026-10-13 11:40 UTC

3 matching categories · 3 matching occurrences

A · 94/100Static analysis complete

Frontwave Mobile Banking

com.pmcu.pmcuBuild 4022.1.2 · 2026-10-13 11:37 UTC

2 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Show TV - Watch Series & TV

cbg.android.showtvBuild 6.6.0 · 2026-10-13 11:36 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Doll Dress Up: DIY Doll Maker

com.doll.maker.avatar.creatorBuild 1.4 · 2026-10-13 11:30 UTC

2 matching categories · 2 matching occurrences

D · 43/100Static analysis complete

Quill Flow: AI Voice Keyboard

com.flowstudios.quillflowBuild 1.1.8 · 2026-10-13 11:28 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

OpenTimeClock2

com.opentimeclock.phone2Build 3.3.1 · 2026-10-13 11:26 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

St. George Events

com.app.testfvwBuild 1 · 2026-10-13 11:22 UTC

3 matching categories · 5 matching occurrences

D · 39/100Static analysis complete

No PMO - Quit Addiction

com.noobapps.NoMoreFapBuild 2.5.3 · 2026-10-13 11:19 UTC

2 matching categories · 4 matching occurrences

A · 91/100Static analysis complete

Mandria: Fantasy Stories

com.matsur.mandriastoriesBuild 1.0.2 · 2026-10-13 11:16 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Employee PrideNet

com.simpplr.cb.creditBuild 7.4.0 · 2026-10-13 11:15 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

Remembery – Memory game pairs

ua.krou.rememberyBuild 1.3.12 · 2026-10-13 11:13 UTC

2 matching categories · 3 matching occurrences

A · 97/100Static analysis complete

Holy Quran: Al Quran Mp3

com.free.alquran.holyquran.quranpakBuild 1.8.7 · 2026-10-13 11:12 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Love Embroidery Magazine

com.im.loveembroideryBuild 8.12 · 2026-10-13 11:09 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Southern Pet Lodge -Williamson

com.pawzlove.android.southern_pet_lodgeBuild 1.15.0 · 2026-10-13 11:05 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

CDR File Viewer

com.vvorld.cdrviewerBuild 6.6 · 2026-10-13 11:00 UTC

2 matching categories · 12 matching occurrences

F · 0/100Static analysis complete

IAA Tow

com.iaa.mobile.IaaTowBuild 22.1 · 2026-10-13 10:53 UTC

2 matching categories · 4 matching occurrences

A · 96/100Static analysis complete

Soap Cutting - Satisfying ASMR

com.crazylabs.soap.cuttingBuild 3.9.4.2 · 2026-10-13 10:51 UTC

4 matching categories · 8 matching occurrences

B · 88/100Static analysis complete

Pushpay

com.pushpay.android.ppBuild 7.5 · 2026-10-13 10:49 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

ChatNMeet: Meet Local Singles

com.you.dudifyBuild 4.4.34 · 2026-10-13 10:47 UTC

1 matching category · 2 matching occurrences

A · 92/100Static analysis complete

Video Power

com.video.powerBuild 1.7 · 2026-10-13 10:45 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

RedeApp: Work + Communities

com.redeapp.androidBuild 6.0.2 · 2026-10-13 10:42 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete