Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4807 matching apps · Counts below include only this page’s mapped finding types.
Hill Climb Racing 2
com.fingersoft.hcr2Build 1.75.1 · 2026-10-12 22:09 UTC2 matching categories · 2 matching occurrences
JusTalk - Video Chat & Calls
com.juphoon.justalkBuild 8.15.1 · 2026-10-12 22:07 UTC4 matching categories · 26 matching occurrences
Seven - 7 Minute Workout
se.perigee.android.sevenBuild 9.25.18-handheld · 2026-10-12 22:02 UTC3 matching categories · 3 matching occurrences
Goibibo: Hotel, Flight & Train
com.goibiboBuild 20.7.0 · 2026-10-12 21:59 UTC4 matching categories · 17 matching occurrences
Bitcoin.com: Crypto Wallet
com.bitcoin.mwalletBuild 9.40.0 · 2026-10-12 21:57 UTC4 matching categories · 7 matching occurrences
Invoice Maker - Invoice Fly
io.labhouse.invoicesappBuild 2.44.0 · 2026-10-12 21:55 UTC1 matching category · 32 matching occurrences
AliExpress - Shopping App
com.alibaba.aliexpresshdBuild 8.177.6 · 2026-10-12 21:53 UTC2 matching categories · 2 matching occurrences
Jorte Calendar & Organizer
jp.co.johospace.jorteBuild 1.9.135 · 2026-10-12 21:51 UTC2 matching categories · 2 matching occurrences
SlideScan - Slide Scanner App
com.photomyne.slidescanBuild 2.9 · 2026-10-12 21:50 UTC3 matching categories · 3 matching occurrences
Simeji Japanese keyboard+Emoji
com.adamrocker.android.input.simejiBuild 23.6.1 · 2026-10-12 21:48 UTC2 matching categories · 2 matching occurrences
Google One
com.google.android.apps.subscriptions.redBuild 1.329.990315153 · 2026-10-12 21:45 UTC2 matching categories · 2 matching occurrences
Mind Notes: Note-Taking Apps
mindnotes.note.notepad.notebook.memo.stickynotesBuild 1.1.05.0824 · 2026-10-12 21:41 UTC2 matching categories · 8 matching occurrences
Spoke (Circuit) Route Planner
com.underwood.route_optimiserBuild 3.69.2 · 2026-10-12 21:40 UTC1 matching category · 3 matching occurrences
Summary - AI Note Taker
io.labhouse.audioappBuild 2.20.1 · 2026-10-12 21:37 UTC1 matching category · 3 matching occurrences
Dr.Web Security Space
com.drweb.proBuild 12.9.11 · 2026-10-12 21:35 UTC2 matching categories · 2 matching occurrences
Genesis Apologetics
com.bf.appf59f9fBuild 1.0.34 · 2026-10-12 21:34 UTC1 matching category · 1 matching occurrence
Bambook - OCR scanner
org.bambook.scannerBuild 1.2.3 · 2026-10-12 21:31 UTC1 matching category · 3 matching occurrences
All Deleted Messages Recovery
com.appsborn.whatsdelete.recover.deleted.messages.rdmBuild 2.2.4 · 2026-10-12 21:28 UTC1 matching category · 1 matching occurrence
Zoho Solo - To do, CRM, bills
com.zoho.solopreneurBuild 1.4.2 · 2026-10-12 21:27 UTC1 matching category · 1 matching occurrence
Voices AI: Voice Changer
com.leonfiedler.voiceaiBuild 1.16.11 · 2026-10-12 21:25 UTC3 matching categories · 3 matching occurrences
Cooking Earth: Restaurant Game
com.cooking.earth.madness.sc.tpBuild 1.2.1 · 2026-10-12 21:24 UTC2 matching categories · 2 matching occurrences
Screen Mirroring - Miracast
screen.mirroring.screenmirroringBuild 1.5.1.2 · 2026-10-12 21:20 UTC2 matching categories · 2 matching occurrences
Fing - Network Tools
com.overlook.android.fingBuild 12.13.4 · 2026-10-12 21:18 UTC2 matching categories · 2 matching occurrences
Screen Recorder Video Recorder
screenrecorder.recorder.editorBuild 8.4.0.0 · 2026-10-12 21:16 UTC3 matching categories · 3 matching occurrences