Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4793 matching apps · Counts below include only this page’s mapped finding types.
Maya - Period & Health
in.plackal.lovecyclesfreeBuild 4.4.1 · 2026-10-14 08:33 UTC3 matching categories · 5 matching occurrences
running.COACH - training plan
me.runningcoachBuild 7.5.0 · 2026-10-14 08:32 UTC2 matching categories · 2 matching occurrences
Pilates Workout at Home
pilatesworkout.yogaworkout.loseweight.workoutappsBuild 1.6.4 · 2026-10-14 08:30 UTC1 matching category · 1 matching occurrence
Cheap Flights App - FareFirst
com.cheapflightsapp.flightbookingBuild 5.1.48 · 2026-10-14 08:28 UTC1 matching category · 2 matching occurrences
Wish: Shop and Save
com.contextlogic.wishBuild 26.7.8 · 2026-10-14 08:27 UTC2 matching categories · 3 matching occurrences
Remitly: Send Money & Transfer
com.remitly.androidappBuild 7.0 · 2026-10-14 08:26 UTC2 matching categories · 2 matching occurrences
Money Manager Expense & Budget
com.realbyteapps.moneymanagerfreeBuild 4.13.0 GF · 2026-10-14 08:22 UTC3 matching categories · 5 matching occurrences
INDIE For Business
com.indusind.indiebizBuild 1.1.9 · 2026-10-14 08:21 UTC1 matching category · 1 matching occurrence
Total Drive - Cloud Storage
com.totaldrive.my.tsBuild 3.0.4 · 2026-10-14 08:17 UTC1 matching category · 3 matching occurrences
eCalendar - Daily Planner
com.fujia.ecalendarBuild 1.49.0 · 2026-10-14 08:15 UTC2 matching categories · 3 matching occurrences
Slotomania™ Slots Casino Games
air.com.playtika.slotomaniaBuild 77.168.20 · 2026-10-14 08:13 UTC2 matching categories · 9 matching occurrences
CamVision: PDF & OCR Scanner
com.exora.pdf.scannerBuild 2.8.2 · 2026-10-14 08:09 UTC1 matching category · 2 matching occurrences
Opera News: breaking & local
com.opera.app.newsBuild 14.3.2254.84549 · 2026-10-14 08:07 UTC1 matching category · 1 matching occurrence
Muzio Offline MP3 Music Player
com.shaiban.audioplayer.mplayerBuild 7.8.5 · 2026-10-14 08:05 UTC2 matching categories · 3 matching occurrences
Picsart AI Photo Editor, Video
com.picsart.studioBuild 30.9.5 · 2026-10-14 08:03 UTC2 matching categories · 2 matching occurrences
Dashlane Password Manager
com.dashlaneBuild 6.2640.1 · 2026-10-14 08:01 UTC2 matching categories · 2 matching occurrences
Workiz Field Service Software
com.workizBuild 4.287 · 2026-10-14 08:00 UTC3 matching categories · 3 matching occurrences
Epicor Kinetic Warehouse
com.epicor.emwBuild 5.46.4 · 2026-10-14 07:57 UTC1 matching category · 1 matching occurrence
Drawing Desk: Learn to Draw
com.axis.drawingdesk.v3Build 11.0.8 · 2026-10-14 07:50 UTC2 matching categories · 6 matching occurrences
Offtrack: AI DJ Mixer
com.offtrack.appBuild 1.6.28 · 2026-10-14 07:48 UTC1 matching category · 1 matching occurrence
Meme Maker: Meme Creator
cocostudios.meme.makerBuild 2.1.2 · 2026-10-14 07:46 UTC1 matching category · 1 matching occurrence
Cast to TV, Chromecast & Roku
cast.video.screenmirroring.casttotvBuild 2.5.5.1 · 2026-10-14 07:45 UTC2 matching categories · 25 matching occurrences
Battery HD
ch.smalltech.battery.freeBuild 1.99.43 (Google Play) · 2026-10-14 07:42 UTC2 matching categories · 2 matching occurrences
Zapper: QR Pay, Bills, Top Up
com.zapper.androidBuild 3.0.1 · 2026-10-14 07:39 UTC1 matching category · 1 matching occurrence
SpongeBob: Krusty Cook-Off
com.tiltingpoint.spongebobBuild 5.12.0 · 2026-10-14 07:35 UTC3 matching categories · 7 matching occurrences