Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4793 matching apps · Counts below include only this page’s mapped finding types.
Spike: AI Email & Team Chat
com.pingapp.appBuild 6.1.5.1 · 2026-10-14 04:31 UTC1 matching category · 1 matching occurrence
Joi - Live Video Chat
video.chat.joiBuild 2.7.0.2 · 2026-10-14 04:27 UTC2 matching categories · 2 matching occurrences
Productive - Habit tracker
com.apalon.to.do.listBuild 1.24.7 · 2026-10-14 04:26 UTC2 matching categories · 4 matching occurrences
Ovulation Tracker App - Premom
premom.eh.com.ehpremomappBuild 1.108.3 · 2026-10-14 04:25 UTC3 matching categories · 355 matching occurrences
Muscle Booster Workout Planner
musclebooster.workout.home.gym.abs.loseweightBuild 3.84.1 · 2026-10-14 04:23 UTC3 matching categories · 3 matching occurrences
Polarsteps
com.polarstepsBuild 10.15.0 · 2026-10-14 04:21 UTC3 matching categories · 8 matching occurrences
maxim — order a taxi & food
com.taxsee.taxseeBuild 3.17.13 · 2026-10-14 04:19 UTC2 matching categories · 4 matching occurrences
Fasten Russia: Taxi
ru.yandex.uberBuild 5.94.1 · 2026-10-14 04:18 UTC2 matching categories · 2 matching occurrences
SHEIN-Shopping Online
com.zzkkoBuild 15.4.6 · 2026-10-14 04:16 UTC2 matching categories · 2 matching occurrences
Joist Invoice & Estimate App
com.joistapp.android.joistBuild 3.87.0 · 2026-10-14 04:14 UTC3 matching categories · 3 matching occurrences
Money Manager: Expense Tracker
com.ktwapps.walletmanagerBuild 11.3 · 2026-10-14 04:12 UTC2 matching categories · 2 matching occurrences
Green Dot - Mobile Banking
com.cardinalcommerce.greendotBuild 4.69.5 · 2026-10-14 04:10 UTC2 matching categories · 2 matching occurrences
PDFgear: PDF Editor & Reader
com.pdfeditor.pdfeditorandriodBuild 1.16 · 2026-10-14 04:09 UTC2 matching categories · 2 matching occurrences
Cute Calendar Schedule Planner
com.calendar.cuteBuild 367 · 2026-10-14 04:07 UTC2 matching categories · 5 matching occurrences
Shortwave — AI Email
com.shortwave.androidBuild 2026.07.01 · 2026-10-14 04:04 UTC1 matching category · 1 matching occurrence
Ground News
com.checkittBuild 5.0.0 · 2026-10-14 04:01 UTC3 matching categories · 6 matching occurrences
VivaVideo - Video Cut & Editor
com.quvideo.xiaoyingBuild 9.38.5 · 2026-10-14 03:57 UTC3 matching categories · 3 matching occurrences
Field Service by Payaca
com.payaca.fieldservice.mobileBuild 1.32.0 · 2026-10-14 03:55 UTC1 matching category · 1 matching occurrence
Dynamics 365 Field Service
com.microsoft.crm.crmphone.fieldServicesBuild 3.26082.8 · 2026-10-14 03:53 UTC3 matching categories · 4 matching occurrences
HelloLeads CRM: AI Sales CRM
com.appgodz.evhBuild 2.8.19 · 2026-10-14 03:51 UTC3 matching categories · 5 matching occurrences
Colorfy: Coloring Book Games
com.fungamesforfree.colorfyBuild 3.45.1 · 2026-10-14 03:46 UTC3 matching categories · 3 matching occurrences
XEQ Equalizer & Bass Booster
com.frack.xeqBuild 42.4.0 · 2026-10-14 03:44 UTC2 matching categories · 2 matching occurrences
Physics Toolbox Sensor Suite
com.chrystianvieyra.physicstoolboxsuiteBuild 2026.09.23 · 2026-10-14 03:35 UTC2 matching categories · 2 matching occurrences
PlantCare+: AI Plant Assistant
com.pakdata.plant_aiBuild 1.1.0 · 2026-10-14 03:34 UTC2 matching categories · 3 matching occurrences
AlfredCamera Home Security app
com.ivuuBuild 2026.21.0 · 2026-10-14 03:33 UTC3 matching categories · 3 matching occurrences