Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4793 matching apps · Counts below include only this page’s mapped finding types.
YNAB
com.youneedabudget.evergreen.appBuild 26.38.1 · 2026-10-14 05:31 UTC2 matching categories · 2 matching occurrences
Scanner Radio - Police Scanner
com.scannerradioBuild 8.30 · 2026-10-14 05:28 UTC3 matching categories · 5 matching occurrences
TypeApp mail - email app
com.trtf.blueBuild 2.2.262 · 2026-10-14 05:27 UTC3 matching categories · 16 matching occurrences
File Manager
com.alphainventor.filemanagerBuild 3.8.3 · 2026-10-14 05:25 UTC2 matching categories · 2 matching occurrences
Notewise - AI Notes, PDF, Docs
com.yygg.note.appBuild 4.1.5 · 2026-10-14 05:23 UTC1 matching category · 3 matching occurrences
NAVER Maps, Navigation
com.nhn.android.nmapBuild 6.11.2.2 · 2026-10-14 05:21 UTC2 matching categories · 2 matching occurrences
Camo Camera
com.reincubate.camoBuild 2.1.22.22860 · 2026-10-14 05:18 UTC1 matching category · 1 matching occurrence
Avira Security Antivirus & VPN
com.avira.androidBuild 7.33.0 · 2026-10-14 05:16 UTC2 matching categories · 3 matching occurrences
IPVanish VPN: Fast & Secure
com.ixolit.ipvanishBuild 4.1.22.0.338000-ipv-gm · 2026-10-14 05:15 UTC2 matching categories · 4 matching occurrences
WEB.DE Mail & Cloud
de.web.mobile.android.mailBuild 9.18.3 · 2026-10-14 05:13 UTC2 matching categories · 2 matching occurrences
Utility Warehouse
com.utilitywarehouse.clubhouseBuild 6.25.0 · 2026-10-14 05:11 UTC3 matching categories · 3 matching occurrences
DJ Music mixer - DJ Mix Studio
dj.music.mixer.sound.effectsBuild 2.7.0 · 2026-10-14 05:07 UTC2 matching categories · 2 matching occurrences
Ringo Ringtones Notifications
com.centralparkapps.ringo.ringtonesBuild 2.3.12 · 2026-10-14 05:05 UTC2 matching categories · 2 matching occurrences
Nine - Email & Calendar
com.ninefolders.hd3Build 4.9.7g · 2026-10-14 04:56 UTC2 matching categories · 2 matching occurrences
G-CPU:Monitor CPU, RAM, Widget
com.insideinc.gcpuBuild 3.1.1 · 2026-10-14 04:55 UTC3 matching categories · 3 matching occurrences
Scandit SDK Showcase
com.scandit.demoappBuild 8.6.2 · 2026-10-14 04:50 UTC2 matching categories · 2 matching occurrences
Honeydew: Recipe Manager
com.redhoney.eatlistBuild 1.8.0 · 2026-10-14 04:49 UTC1 matching category · 7 matching occurrences
PetSmart
com.petsmart.consumermobileBuild 15.12.3 · 2026-10-14 04:47 UTC3 matching categories · 3 matching occurrences
Govee Home
com.govee.homeBuild 7.7.02 · 2026-10-14 04:45 UTC2 matching categories · 67 matching occurrences
DB Navigator
de.hafas.android.dbBuild 26.19.0 · 2026-10-14 04:42 UTC2 matching categories · 2 matching occurrences
Job Hai - Search Job, Vacancy
com.jobhai.jobsBuild 5.0.49 · 2026-10-14 04:41 UTC2 matching categories · 4 matching occurrences
Resume Builder - CV Maker App
com.duckresume.cvmakerBuild 70.0 · 2026-10-14 04:39 UTC1 matching category · 2 matching occurrences
Bank Jago/Jago Syariah
com.jago.digitalBankingBuild 8.96.0 · 2026-10-14 04:38 UTC4 matching categories · 5 matching occurrences
Tappytoon Manhwa & Novels
com.contentsfirst.tappytoonBuild 4.20.0 · 2026-10-14 04:36 UTC2 matching categories · 2 matching occurrences
The Battle of Polytopia
air.com.midjiwan.polytopiaBuild 2.17.3.16375 · 2026-10-14 04:33 UTC1 matching category · 1 matching occurrence