Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4820 matching apps · Counts below include only this page’s mapped finding types.
Goods Puzzle: Sort Challenge™
com.fc.goods.sort.matching.puzzle.triplemasterBuild 5.40 · 2026-10-11 21:14 UTC2 matching categories · 2 matching occurrences
Doc Sign - Sign & Fill Doc Pdf
org.docScanner.pdf2img.img2pdfBuild 1.0.120 · 2026-10-11 21:04 UTC1 matching category · 1 matching occurrence
BurgerFi
com.olo.burgerfiBuild 2025.8.5 · 2026-10-11 21:03 UTC3 matching categories · 3 matching occurrences
Budget Planner & App: Spendee
com.cleevio.spendeeBuild 6.0.9 · 2026-10-11 21:01 UTC2 matching categories · 4 matching occurrences
Pluxee Brasil
com.primety.sodexomobileBuild 14.0.61 · 2026-10-11 20:59 UTC2 matching categories · 2 matching occurrences
CamScanner- scanner, PDF maker
com.intsig.camscannerBuild 7.26.5.2609160000 · 2026-10-11 20:54 UTC3 matching categories · 22 matching occurrences
The General Insurance® App
com.pgac.general.droidBuild 8.2.0 · 2026-10-11 20:48 UTC1 matching category · 2 matching occurrences
OnStar Dealer Rewards
air.com.maritz.onstarRewardsBuild 4.3.1 · 2026-10-11 20:46 UTC1 matching category · 3 matching occurrences
2026 Calendar Launcher
com.calendarlauncher.calendar.agenda.planner.schedule.events.androidBuild 2.21.0 · 2026-10-11 20:44 UTC2 matching categories · 15 matching occurrences
Charleston Battery
com.sportinginnovations.uslchsBuild 1.3.18 · 2026-10-11 20:41 UTC2 matching categories · 2 matching occurrences
Weather data & microclimate :
com.wunderground.android.weatherBuild 6.20.1 · 2026-10-11 20:38 UTC3 matching categories · 3 matching occurrences
Kingdom: Assassin
io.supercent.kingdomBuild 1.24.0 · 2026-10-11 20:36 UTC3 matching categories · 3 matching occurrences
Mega Ramp Ultimate Stunts
com.tt.mega.ramps.ultimate.racesBuild 1.9.9.7 · 2026-10-11 20:33 UTC1 matching category · 1 matching occurrence
All Video Downloader & Browser
instasaver.videodownloader.photodownloader.repostBuild 2.2.3 · 2026-10-11 20:31 UTC2 matching categories · 50 matching occurrences
iVoice - OS 26 Voice Memos
com.nhstudio.ivoiceBuild 1.7.5 · 2026-10-11 20:28 UTC2 matching categories · 2 matching occurrences
Shazam: Find Music & Concerts
com.shazam.androidBuild 16.62.1-261006 · 2026-10-11 20:26 UTC2 matching categories · 4 matching occurrences
Neo Launcher Hyperion Scifi
appmania.launcher.scifiBuild 7.6 · 2026-10-11 20:24 UTC2 matching categories · 2 matching occurrences
Brave Nightly
com.brave.browser_nightlyBuild 1.99.26 · 2026-10-11 20:23 UTC1 matching category · 2 matching occurrences
Blue Water Rewards
com.excentus.bluewaterBuild 2.0.0 · 2026-10-11 20:21 UTC1 matching category · 3 matching occurrences
Getlead CRM
com.getlead.appBuild 3.2.4 · 2026-10-11 20:15 UTC1 matching category · 1 matching occurrence
Speed Test Pro - WiFi Analyzer
biz.cloudex.android.speedtestproBuild 1.0.1 · 2026-10-11 20:11 UTC1 matching category · 1 matching occurrence
iTalkBB TV - 北美首选华语视频平台
com.italkbbtv.phoneBuild 3.5.4 · 2026-10-11 20:06 UTC2 matching categories · 2 matching occurrences
Animal Rescue - Zoo Safari
com.al.animalrescueBuild 26.2.25 · 2026-10-11 20:03 UTC1 matching category · 1 matching occurrence
Ringtonemall: Songs Editor
com.ringtonemall.songeditBuild 1.2.2 · 2026-10-11 20:00 UTC1 matching category · 3 matching occurrences
Perry Local Schools
com.schoolpointe.oh_perrylclschsBuild 200.35.1 · 2026-10-11 19:58 UTC1 matching category · 1 matching occurrence