Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4807 matching apps · Counts below include only this page’s mapped finding types.

SAP Field Service Management

com.sap.fsmBuild 26.09.0 · 2026-10-13 01:26 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Receipt Scanner

zazmic.at.invoice_parserBuild 1.0.0 · 2026-10-13 01:23 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

Nest

com.nest.androidBuild 5.88.0.2 · 2026-10-13 01:22 UTC

2 matching categories · 3 matching occurrences

A · 90/100Static analysis complete

Live Translator: Arc Translate

com.codeway.translatorappBuild 1.0.2 · 2026-10-13 01:20 UTC

2 matching categories · 4 matching occurrences

B · 79/100Static analysis complete

Backup & Restore Messages

com.backup.chat.restore.messagesBuild 1.0.17 · 2026-10-13 01:12 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

PlantTAGG Plant Care Gardening

com.planttagg.mobileBuild 4.1.8 · 2026-10-13 00:57 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Fuel Rewards® program

com.excentus.frn.androidBuild 3.25.0 · 2026-10-13 00:55 UTC

2 matching categories · 4 matching occurrences

D · 43/100Static analysis complete

Knowunity: AI Study & Homework

de.knowunity.appBuild 6.42.0 · 2026-10-13 00:53 UTC

1 matching category · 1 matching occurrence

A · 90/100Static analysis complete

Lingopanda: Language Learning

com.pingolearn.languagesBuild 3.9.1 · 2026-10-13 00:51 UTC

2 matching categories · 5 matching occurrences

F · 18/100Static analysis complete

Jackpot Party Casino Slots

com.williamsinteractive.jackpotpartyBuild 5073.01 · 2026-10-13 00:48 UTC

2 matching categories · 4 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Lezhin Comics - Daily Releases

com.lezhin.comicsBuild 2026.9.1 · 2026-10-13 00:46 UTC

2 matching categories · 5 matching occurrences

C · 73/100Static analysis complete

Prospero.Ai - AI Stock Trading

ai.prosperoBuild 2.6.10 · 2026-10-13 00:45 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

World Conqueror 4-WW2 Strategy

com.easytech.wc4.androidBuild 1.29.2 · 2026-10-13 00:42 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Threads

com.instagram.barcelonaBuild 451.0.0.51.80 · 2026-10-13 00:40 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Frequency Healing Sounds Hertz

com.frequency.healing.chakra.binaural.beats.brainwavesBuild 1.6.8 · 2026-10-13 00:32 UTC

1 matching category · 527 matching occurrences

A · 93/100Static analysis complete

Step Tracker Launcher

com.stepcounter.pedometer.steptracker.fitness.androidBuild 1.12.1 · 2026-10-13 00:31 UTC

1 matching category · 13 matching occurrences

A · 98/100Static analysis complete

Karta Offline GPS Maps Nav

com.kartatech.karta.gpsBuild 2.53.9 · 2026-10-13 00:29 UTC

2 matching categories · 6 matching occurrences

A · 97/100Static analysis complete

Wanderlog - Trip Planner App

com.wanderlog.androidBuild 2.224 · 2026-10-13 00:27 UTC

3 matching categories · 7 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Alibaba.com - B2B marketplace

com.alibaba.intl.android.apps.poseidonBuild 26.34.0 · 2026-10-13 00:25 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Music Player & MP3 - DDMusic

musicplayer.playmusic.audioplayerBuild 2.11.1 · 2026-10-13 00:22 UTC

1 matching category · 1 matching occurrence

B · 86/100Static analysis complete

Action Launcher: Pixel Edition

com.actionlauncher.playstoreBuild 52.0 · 2026-10-13 00:20 UTC

3 matching categories · 53 matching occurrences

B · 83/100Static analysis complete

Falcon PDF - Editor & Tools

com.avrapps.pdfviewerBuild 2026.09 · 2026-10-13 00:19 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete

Yahoo News: Daily News For You

com.yahoo.mobile.client.android.yahooBuild 97.0.0 · 2026-10-13 00:18 UTC

3 matching categories · 5 matching occurrences

A · 96/100Static analysis complete

Google Cloud

com.google.android.apps.cloudconsoleBuild 26.09.241400 · 2026-10-13 00:16 UTC

3 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Todoery: To Do List & Planner

todolist.scheduleplanner.dailyplanner.todo.remindersBuild 1.03.39.0929 · 2026-10-13 00:14 UTC

1 matching category · 3 matching occurrences

A · 98/100Static analysis complete