Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4807 matching apps · Counts below include only this page’s mapped finding types.

Erudite Dictionary Translator

com.erudite.ecdictBuild 15.0.0 · 2026-10-12 11:50 UTC

1 matching category · 1 matching occurrence

B · 79/100Static analysis complete

Music player

com.media.music.mp3.musicplayerBuild 251.04 · 2026-10-12 11:47 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

YouCam Perfect - Photo Editor

com.cyberlink.youperfectBuild 6.21.2 · 2026-10-12 11:45 UTC

3 matching categories · 3 matching occurrences

B · 84/100Static analysis complete

Google Chrome

com.android.chromeBuild 154.0.8037.127 · 2026-10-12 11:43 UTC

1 matching category · 20 matching occurrences

A · 97/100Static analysis complete

Moka POS - Aplikasi Kasir

com.mokapos.androidBuild 22.2.0 · 2026-10-12 11:41 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

Lead Connector

com.LeadConnectorBuild 4.26.0 · 2026-10-12 11:39 UTC

4 matching categories · 9 matching occurrences

A · 95/100Static analysis complete

LightPDF Scanner: Scan & OCR

com.apowersoft.documentscanBuild 2.1.5 · 2026-10-12 11:37 UTC

1 matching category · 1 matching occurrence

A · 91/100Static analysis complete

Old Telephone Ringtones

com.bestringtonesapps.oldphoneringtonesBuild 13.5.4 · 2026-10-12 11:33 UTC

3 matching categories · 5 matching occurrences

F · 34/100Static analysis complete

Photoshop Express Photo Editor

com.adobe.psmobileBuild 18.4.40 · 2026-10-12 11:30 UTC

3 matching categories · 6 matching occurrences

B · 88/100Static analysis complete

IP Tools: Network Utilities

com.ddm.iptoolsBuild 10.0 · 2026-10-12 11:27 UTC

2 matching categories · 2 matching occurrences

B · 84/100Static analysis complete

Screen Recorder - Vidorec

vidorec.appBuild 1.11.2 · 2026-10-12 11:25 UTC

1 matching category · 2 matching occurrences

A · 98/100Static analysis complete

Baby Monitor Saby. 3G BabyCam

com.saby.babymonitor3gBuild 2.205 · 2026-10-12 11:19 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Live Fuel Prices - Fillzz

dev.nexyon.essencielBuild 4.1.1 · 2026-10-12 11:17 UTC

1 matching category · 1 matching occurrence

Limited coverageRecorded findings available · overall grade withheld

Realtor.com Real Estate & Rent

com.move.realtorBuild 27.5.0 · 2026-10-12 11:13 UTC

3 matching categories · 3 matching occurrences

A · 90/100Static analysis complete

Resume Builder - CV Engineer

sampson.cvbuilderBuild 18.01.95 · 2026-10-12 11:12 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

Vocabulary flashcards: Vocabuo

world.petr.vokabelnBuild 5.5.6 · 2026-10-12 11:11 UTC

1 matching category · 13 matching occurrences

F · 0/100Static analysis complete

Bubble BD Comics Mangas

com.heappi.android.BubbleBuild 4.26.1 · 2026-10-12 11:09 UTC

4 matching categories · 4 matching occurrences

A · 95/100Static analysis complete

Club Vegas Casino Slots Games

com.bagelcode.slots1Build 246.0.8-mobile · 2026-10-12 11:06 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Night Camera Mode: Video Photo

com.night.mode.camera.photo.videoBuild 1.2.8 · 2026-10-12 11:04 UTC

1 matching category · 1 matching occurrence

F · 32/100Static analysis complete

97.1 The Fan

com.jacapps.wbnsBuild 7.19.4 · 2026-10-12 11:01 UTC

1 matching category · 3 matching occurrences

B · 80/100Static analysis complete

Al Saad Home

com.dreamhome.alsaadhomeappBuild 2.97 · 2026-10-12 10:58 UTC

2 matching categories · 2 matching occurrences

B · 85/100Static analysis complete

Stick War: Legacy

com.maxgames.stickwarlegacyBuild 2026.1.1086 · 2026-10-12 10:56 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Maryland MVA Permit Prep 2026

com.spotterlook.driverstartmdBuild 3.4.89 · 2026-10-12 10:54 UTC

3 matching categories · 6 matching occurrences

B · 89/100Static analysis complete

My Talking Tom 2: Pet Game

com.outfit7.mytalkingtom2Build 26.4.10.28786 · 2026-10-12 10:52 UTC

5 matching categories · 56 matching occurrences

F · 0/100Static analysis complete

Daily Planner, To Do List

com.planner.journalBuild 104.0 · 2026-10-12 10:50 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete