Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4807 matching apps · Counts below include only this page’s mapped finding types.
DealSeek: Coupons & Discounts
com.dealseekorg.dealseekBuild 1.62.0 · 2026-10-12 23:11 UTC1 matching category · 1 matching occurrence
File Manager
files.fileexplorer.filemanagerBuild 1.5.5.9 · 2026-10-12 23:09 UTC2 matching categories · 2 matching occurrences
Ult: Trade Stocks & Crypto
com.defi.walletBuild 3.0.2 · 2026-10-12 23:08 UTC2 matching categories · 4 matching occurrences
Cashew—Expense Budget Tracker
com.budget.tracker_appBuild 6.6.11 · 2026-10-12 23:03 UTC1 matching category · 3 matching occurrences
Kids Color Games: Baby Drawing
com.bimiboo.drawingBuild 3.138 · 2026-10-12 23:00 UTC1 matching category · 1 matching occurrence
Words Meaning - US Dictionary
dev.xaenox.dictionaryBuild 1.4.1 · 2026-10-12 22:58 UTC1 matching category · 2 matching occurrences
MSN
com.microsoft.amp.apps.bingnewsBuild 34.1.440907006 · 2026-10-12 22:57 UTC2 matching categories · 2 matching occurrences
Psiphon VPN: Secure Access
com.psiphon3.subscriptionBuild 2.5.11 · 2026-10-12 22:55 UTC1 matching category · 1 matching occurrence
YouCut - Video Editor & Maker
com.camerasideas.trimmerBuild 1.722.1225 · 2026-10-12 22:52 UTC4 matching categories · 4 matching occurrences
FaceApp: Perfect Face Editor
io.faceappBuild 14.0.0 · 2026-10-12 22:51 UTC2 matching categories · 2 matching occurrences
WarehouseNow -Rent a Warehouse
com.warehousenow.customerBuild 3.0.1 · 2026-10-12 22:48 UTC1 matching category · 1 matching occurrence
Today's Hit Music Ringtones
net.andromo.dev58853.app253629Build 6.5.73 · 2026-10-12 22:46 UTC2 matching categories · 4 matching occurrences
Web Video Cast | Browser to TV
com.instantbits.cast.webvideoBuild 6.0.3 · 2026-10-12 22:45 UTC2 matching categories · 8 matching occurrences
DJ Mixer Studio - DJ Music Mix
music.disc.dj.mixer.music.mixerBuild 2.1.9 · 2026-10-12 22:44 UTC2 matching categories · 2 matching occurrences
PictureThis - Plant Identifier
cn.danatech.xingseusBuild 5.36.0 · 2026-10-12 22:41 UTC3 matching categories · 5 matching occurrences
Cookpad recipes, homemade food
com.mufumbo.android.recipe.searchBuild 26.41.0.2 · 2026-10-12 22:39 UTC2 matching categories · 3 matching occurrences
TOSbank
no.tolga.netbank.mobileBuild 1.52.3 · 2026-10-12 22:35 UTC2 matching categories · 2 matching occurrences
New York City FC
com.nycfc.androidBuild 1.9.7 · 2026-10-12 22:32 UTC2 matching categories · 59 matching occurrences
meterUP Parking
net.sharewire.meterUPBuild 26.38.3 · 2026-10-12 22:26 UTC1 matching category · 2 matching occurrences
Redfin: Buy, Sell & Rent Homes
com.redfin.androidBuild 646.0 · 2026-10-12 22:24 UTC2 matching categories · 4 matching occurrences
Metronome: Practice & Tempo
com.merkost.metronomeBuild 1.3.0 · 2026-10-12 22:23 UTC1 matching category · 3 matching occurrences
Talking Tom: Hero Dash Run
com.outfit7.herodashBuild 26.5.1.12192 · 2026-10-12 22:20 UTC5 matching categories · 50 matching occurrences
Key Collector Comics
com.keycollectorcomics.keycollectorBuild 4.8.0 · 2026-10-12 22:16 UTC3 matching categories · 4 matching occurrences
FOX Sports: Watch Live Games
com.foxsports.androidBuild 5.159.1 · 2026-10-12 22:13 UTC3 matching categories · 5 matching occurrences
n-Track Studio DAW: Make Music
com.ntrack.studio.demoBuild 10.5.205 · 2026-10-12 22:11 UTC2 matching categories · 2 matching occurrences