Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4793 matching apps · Counts below include only this page’s mapped finding types.

GrabMerchant

com.grab.merchantBuild 4.196.0 · 2026-10-14 06:30 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

CRM Video

com.connectcdk.videoBuild 260.08.03 · 2026-10-14 06:27 UTC

1 matching category · 2 matching occurrences

A · 92/100Static analysis complete

Settle Up – Group Expenses

cz.destil.settleupBuild 11.0.2283 · 2026-10-14 06:25 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

STL & 3D Model Viewer - Mes3D

com.onnex.mes3dBuild 1.0.15 · 2026-10-14 06:24 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

Screen Recorder with Facecam

com.facecam.screenrecorderBuild 1.0.2 · 2026-10-14 06:23 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Violin Tuner - LikeTones

com.sonkins.tviolinBuild 26.2.8 · 2026-10-14 06:21 UTC

1 matching category · 3 matching occurrences

D · 43/100Static analysis complete

t-online - Nachrichten

de.telekom.t_online_deBuild 16.3.1 · 2026-10-14 06:19 UTC

3 matching categories · 3 matching occurrences

A · 90/100Static analysis complete

Roku Remote (Official)

com.roku.remoteBuild 14.1.2.10730047 · 2026-10-14 06:17 UTC

2 matching categories · 4 matching occurrences

A · 91/100Static analysis complete

WiFiSet - Wifi Network Scanner

com.wifiset.wifisetBuild 7.8.0 · 2026-10-14 06:15 UTC

1 matching category · 2 matching occurrences

A · 92/100Static analysis complete

Cleaner - Clean Phone & VPN

com.stolitomsonBuild 2.6.27.1 · 2026-10-14 06:14 UTC

1 matching category · 1 matching occurrence

A · 97/100Static analysis complete

Cooking World!

com.cooking.world.chef.craze.restaurant.fever.freeBuild 1.56.3.1242 · 2026-10-14 06:08 UTC

3 matching categories · 7 matching occurrences

B · 89/100Static analysis complete

My Talking Hank: Islands

com.outfit7.mytalkinghankBuild 26.5.0.48585 · 2026-10-14 06:05 UTC

5 matching categories · 56 matching occurrences

F · 0/100Static analysis complete

Cittamobi: Ônibus e Trilhos

br.com.cittabusBuild 7.2.162 · 2026-10-14 06:02 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

KW Real Estate

com.smarteragent.android.kwBuild 9.36.0 · 2026-10-14 06:01 UTC

4 matching categories · 11 matching occurrences

F · 0/100Static analysis complete

Bix Learn: Language Learning

com.divineworld.bixlearnBuild 1.5.0+37 · 2026-10-14 05:57 UTC

2 matching categories · 38 matching occurrences

F · 0/100Static analysis complete

Email: Fast, Manage All Mails

email.home.allmail.launcherBuild 1.5.3 · 2026-10-14 05:55 UTC

1 matching category · 1 matching occurrence

B · 80/100Static analysis complete

One4Wall: 4K Wallpapers & Live

one4studio.wallpaper.one4wallBuild 5.2.10 · 2026-10-14 05:53 UTC

1 matching category · 2 matching occurrences

A · 97/100Static analysis complete

Spectrum TV

com.TWCableTVBuild 10.13.0.300599705.release · 2026-10-14 05:52 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Fire Emblem Heroes

com.nintendo.zabaBuild 10.10.0 · 2026-10-14 05:50 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Sleep Tracker & Recorder: Yawn

sleeptrakcer.sleeprecorder.sleepapp.sleepBuild 1.26.0 · 2026-10-14 05:47 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Pikmin Bloom: Walk & Explore

com.nianticlabs.pikminBuild 155.0 · 2026-10-14 05:45 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Sports Tracker: Run Bike Hike

com.stt.androidBuild 6.13.8 · 2026-10-14 05:43 UTC

2 matching categories · 4 matching occurrences

A · 95/100Static analysis complete

Skiplagged - Exclusive Flights

com.skiplaggedBuild 3.14.0 · 2026-10-14 05:39 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Best Buy: Shop tech deals

com.bestbuy.androidBuild 26.9.20 · 2026-10-14 05:36 UTC

2 matching categories · 2 matching occurrences

C · 72/100Static analysis complete

Edge - Bitcoin & Crypto Wallet

co.edgesecure.appBuild 4.51.3 · 2026-10-14 05:34 UTC

5 matching categories · 15 matching occurrences

F · 0/100Static analysis complete