Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4807 matching apps · Counts below include only this page’s mapped finding types.

ChatsBack See Deleted Messages

com.imyfone.chatbackBuild 1.2.2 · 2026-10-13 06:33 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Voice Recorder: Record Audio

com.digitalchemy.recorderBuild 1.14.11 · 2026-10-13 06:31 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Cloud Backup and Data Restore

com.cloud.backup.restore.dataBuild 15.0.0 · 2026-10-13 06:28 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

Messages: SMS Text

com.messages.sms.messaging.appBuild 1.0.3 · 2026-10-13 06:26 UTC

1 matching category · 2 matching occurrences

B · 86/100Static analysis complete

Clean Master Pro

com.master.bot.clean.pilotBuild 2.5.0 · 2026-10-13 06:24 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

realestate.com.au - Property

au.com.realestate.appBuild 5.372.0 · 2026-10-13 06:23 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Stimy AI: Math Solver App

com.stimyBuild 1.5.0.2 · 2026-10-13 06:21 UTC

3 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Knowt: AI Flashcards & Notes

com.knowt.appBuild 4.0.0 · 2026-10-13 06:20 UTC

2 matching categories · 6 matching occurrences

A · 90/100Static analysis complete

Manga Fox - Manga Comic Reader

com.nw.cleansite.novel.mangareaderBuild 1.1.310 · 2026-10-13 06:09 UTC

1 matching category · 1 matching occurrence

B · 85/100Static analysis complete

Remote Mouse

com.hungrybolo.remotemouseandroidBuild 5.317 · 2026-10-13 06:08 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

Huuuge Casino 777 Slots Games

com.huuuge.casino.slotsBuild 12.09.27229 · 2026-10-13 06:07 UTC

3 matching categories · 3 matching occurrences

A · 90/100Static analysis complete

CSR 2 Realistic Drag Racing

com.naturalmotion.customstreetracer2Build 6.7.1 · 2026-10-13 06:05 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

dfolio - Dropbox™ Photos

com.snapwood.dropfolioBuild 7.9.50 · 2026-10-13 06:03 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Tai Chi Meditation & Breath

net.workoutinc.tai_chi_meditationBuild 1.0.1 · 2026-10-13 06:01 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

Routine Planner, Habit Tracker

com.alt.goodmorningBuild 3.30.2 · 2026-10-13 06:00 UTC

3 matching categories · 6 matching occurrences

B · 76/100Static analysis complete

KiraKal: AI Calorie Counter

com.kirakal.appBuild 1.27 · 2026-10-13 05:54 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Tripadvisor: Plan & Book Trips

com.tripadvisor.tripadvisorBuild 70.2 · 2026-10-13 05:52 UTC

2 matching categories · 5 matching occurrences

A · 91/100Static analysis complete

Starbucks

com.starbucks.mobilecardBuild 6.132 · 2026-10-13 05:51 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Target: Shop. Style. Save.

com.target.uiBuild 2026.40.0 · 2026-10-13 05:49 UTC

3 matching categories · 5 matching occurrences

A · 96/100Static analysis complete

Kraken: Buy Crypto & Stocks

com.kraken.invest.appBuild 3.84.0 · 2026-10-13 05:48 UTC

2 matching categories · 2 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Notepad, Notes, Easy Notebook

notes.notepad.checklist.calendar.todolist.notebookBuild 1.4.4.103 · 2026-10-13 05:46 UTC

1 matching category · 1 matching occurrence

A · 97/100Static analysis complete

Live Wallpaper - Wallpapers 4K

com.wallpapers.wallpaper4k.livewallpaperBuild 3.16.10 · 2026-10-13 05:43 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Any.do - To do list & Calendar

com.anydoBuild 5.22.4.0 · 2026-10-13 05:40 UTC

3 matching categories · 6 matching occurrences

B · 88/100Static analysis complete

Beat Maker Pro - DJ Drum Pad

com.mwm.samplerBuild 4.19.00 · 2026-10-13 05:38 UTC

2 matching categories · 3 matching occurrences

A · 90/100Static analysis complete