Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4990 matching apps · Counts below include only this page’s mapped finding types.
PlantIn Plant Identifier, Care
com.myplantin.appBuild 2.70.0 · 2026-09-14 07:56 UTC2 matching categories · 2 matching occurrences
Ibotta: Save & Earn Cash Back
com.ibotta.androidBuild 6.353.0 · 2026-09-14 05:06 UTC3 matching categories · 3 matching occurrences
emaqi - Read Manga & Comics
com.emaqi.androidBuild 2.6.0 · 2026-09-13 19:19 UTC1 matching category · 2 matching occurrences
Boo App: Dating. Friends. Chat
enterprises.dating.booBuild 1.13.137 · 2026-09-13 09:04 UTC2 matching categories · 2 matching occurrences
Pixel Gallery - Privacy & AI
com.mk.pixelBuild 1.22.0 · 2026-09-12 12:43 UTC1 matching category · 2 matching occurrences
BuzzCast: Live Stream & Chat
com.guochao.faceshowBuild 3.2.88 · 2026-09-12 04:42 UTC3 matching categories · 3 matching occurrences
Monkey - make new friends
cool.monkey.androidBuild 7.68.0 · 2026-09-12 04:22 UTC3 matching categories · 3 matching occurrences
Duet Dating App: Chat & Meet
next.bondee.techBuild 2.79.0 · 2026-09-12 02:41 UTC1 matching category · 3 matching occurrences
Priceline: Hotel, Flight & Car
com.priceline.android.negotiatorBuild 18.1.401 · 2026-09-12 00:19 UTC3 matching categories · 4 matching occurrences
RetailMeNot: Rewards & Codes
com.whaleshark.retailmenotBuild 10.0.4 · 2026-09-11 20:48 UTC1 matching category · 1 matching occurrence
Meme Maker - AI Meme Generator
com.adex77.memefast.mememakerBuild 1.0.17 · 2026-09-11 15:20 UTC1 matching category · 1 matching occurrence
Contacts Backup: Cloud Storage
com.contactsbackup.cloudstorage.restoredata.contactBuild 38.9 · 2026-09-11 12:51 UTC2 matching categories · 2 matching occurrences
CheapFuel: Gas Prices
com.sogapps.cheapfuelBuild 3.1.7 · 2026-09-11 11:32 UTC2 matching categories · 4 matching occurrences
OmeTV – Video Chat Alternative
omegle.tvBuild 605114 · 2026-09-11 09:57 UTC2 matching categories · 2 matching occurrences
Bumble Dating App: Meet & Date
com.bumble.appBuild 5.483.0 · 2026-09-11 07:35 UTC3 matching categories · 3 matching occurrences
Feeld: Open-Minded Dating App
co.feeldBuild 9.12.1 · 2026-09-11 06:02 UTC1 matching category · 1 matching occurrence
Stir: Single Parent Dating App
com.match.android.stirBuild 25.08.02 · 2026-09-11 05:59 UTC2 matching categories · 2 matching occurrences
Bodybuilding Warehouse
co.tapcart.app.id_1n6OtpCT2mBuild 15 · 2026-09-11 05:21 UTC3 matching categories · 3 matching occurrences
Dank’s Warehouse
com.digitalawesome.danksBuild 1.0.4 · 2026-09-11 05:03 UTC1 matching category · 3 matching occurrences
KartRider Rush+
com.nexon.kartBuild 1.40.8 · 2026-09-08 17:26 UTC1 matching category · 1 matching occurrence
Meme Generator Plus
com.zombodroid.memegenplusBuild 2.0.507 · 2026-09-08 01:35 UTC2 matching categories · 2 matching occurrences
CAD Editor-DWG Viewer &Convert
net.cadeditor.appBuild 0.3.0 · 2026-09-07 13:47 UTC1 matching category · 1 matching occurrence
Amazon Flex
com.amazon.flex.rabbitBuild 3.141.2.93.0 · 2026-09-07 09:46 UTC2 matching categories · 5 matching occurrences
Fubo: Watch Live TV & Sports
tv.fubo.mobileBuild 5.58.0 · 2026-09-07 09:13 UTC2 matching categories · 4 matching occurrences