Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4807 matching apps · Counts below include only this page’s mapped finding types.
Mondly: Learn 41 Languages
com.atistudios.mondly.languagesBuild 10.41.5 · 2026-10-13 03:35 UTC2 matching categories · 4 matching occurrences
PBS: TV Shows & Documentaries
com.pbs.videoBuild 5.26.1 · 2026-10-13 03:28 UTC1 matching category · 3 matching occurrences
Super Mario Run
com.nintendo.zaraBuild 3.4.3 · 2026-10-13 03:24 UTC2 matching categories · 2 matching occurrences
AllTrails: Hike, Bike & Run
com.alltrails.alltrailsBuild 26.10.11 · 2026-10-13 03:16 UTC2 matching categories · 2 matching occurrences
American Airlines
com.aa.androidBuild 2026.29 · 2026-10-13 03:14 UTC3 matching categories · 5 matching occurrences
CouponCabin: Coupon App
com.couponcabinBuild 5.7.3 · 2026-10-13 03:12 UTC2 matching categories · 2 matching occurrences
Olive Garden Italian Kitchen
com.darden.mobile.olivegardenBuild 7.80.0 · 2026-10-13 03:11 UTC2 matching categories · 2 matching occurrences
Amazon Shopping
com.amazon.mShop.android.shoppingBuild 32.18.0.100 · 2026-10-13 03:10 UTC3 matching categories · 5 matching occurrences
PDF Viewer Pro
com.pspdfkit.viewerBuild 2026.17 · 2026-10-13 03:08 UTC2 matching categories · 4 matching occurrences
Fetch Mobi
au.com.fetchtvBuild 3.33.2 · 2026-10-13 03:06 UTC2 matching categories · 4 matching occurrences
Budget App — PocketGuard
com.pocketguard.android.appBuild 5.19.3 · 2026-10-13 03:04 UTC2 matching categories · 2 matching occurrences
CloudBooks audio book player
com.cloudbeatsbooksBuild 2.6.07 · 2026-10-13 03:02 UTC2 matching categories · 2 matching occurrences
Yandex Disk – Cloud Storage
ru.yandex.diskBuild 6.88.0 · 2026-10-13 03:01 UTC2 matching categories · 2 matching occurrences
NBC News: Breaking News & Live
com.zumobi.msnbcBuild 14.2.0 · 2026-10-13 02:59 UTC2 matching categories · 3 matching occurrences
U Dictionary Translator
com.youdao.hindictBuild 6.7.5 · 2026-10-13 02:58 UTC2 matching categories · 3 matching occurrences
AVG Secure VPN Proxy & Privacy
com.avg.android.vpnBuild 3.2.6686 · 2026-10-13 02:56 UTC2 matching categories · 2 matching occurrences
Pulsar Music Player
com.rhmsoft.pulsarBuild 1.13.12 · 2026-10-13 02:55 UTC2 matching categories · 2 matching occurrences
My Cafe — Restaurant Game
com.melesta.coffeeshopBuild 2026.11.0.0 · 2026-10-13 02:53 UTC2 matching categories · 2 matching occurrences
Malwarebytes - Mobile Security
org.malwarebytes.antimalwareBuild 5.32.0+582 · 2026-10-13 02:50 UTC3 matching categories · 5 matching occurrences
O-KAM Pro
com.okampro.oksmartBuild 3.0.36 · 2026-10-13 02:49 UTC2 matching categories · 2 matching occurrences
HubSpot
com.hubspot.androidBuild 5.4.0 · 2026-10-13 02:47 UTC2 matching categories · 5 matching occurrences
Gallery - Photo Gallery, Album
gallery.lock.album.manager.photogalleryBuild 1.5.6 · 2026-10-13 02:40 UTC2 matching categories · 3 matching occurrences
RAM
com.fca.myconnect.ram.naftaBuild 1.99.705 · 2026-10-13 02:38 UTC2 matching categories · 54 matching occurrences
Sandbox - Physics Simulator
com.tgame.sand.boxBuild 18.8 · 2026-10-13 02:35 UTC1 matching category · 1 matching occurrence
Screen Recorder Pro
recorder.videoeditor.screenrecorder.proBuild 0.1.0-rc17 · 2026-10-13 02:31 UTC1 matching category · 2 matching occurrences