Reference detail

CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

Recorded findings mapped to this weakness category. Review the detection and its context in the app report.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Hard-coded endpoint URL

Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

4820 matching apps · Counts below include only this page’s mapped finding types.

Indie Wrestler

com.ArrenMarketing.IndieWrestlerBuild 1.5.26 · 2026-10-11 19:57 UTC

2 matching categories · 2 matching occurrences

D · 37/100Static analysis complete

Compass

com.peace.CompassBuild 3.0.0 · 2026-10-11 19:50 UTC

2 matching categories · 4 matching occurrences

A · 91/100Static analysis complete

My Talking Angela 2

com.outfit7.mytalkingangela2Build 26.5.4.44586 · 2026-10-11 19:39 UTC

5 matching categories · 56 matching occurrences

F · 0/100Static analysis complete

Daily Horoscope Leo 2026

com.molibe.horoscope.leoBuild 1.1.1 · 2026-10-11 19:35 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

VIETPN High speed VPN

com.vietpn.vpnBuild 3.6.18 · 2026-10-11 19:34 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Jakdojade: public transport

com.citynav.jakdojade.pl.androidBuild 7.3.4 · 2026-10-11 19:26 UTC

2 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

CookUnity Business (Fraîche)

com.fraiche.fraicheBuild 2.14.0 · 2026-10-11 19:23 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

JobStack for Work | Daily Pay

org.peopleready.jobstackBuild 1.80.0 · 2026-10-11 19:19 UTC

2 matching categories · 2 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Paave: AI Paper Trading

com.difisoft.paaveBuild 2.0.0 · 2026-10-11 19:15 UTC

2 matching categories · 3 matching occurrences

A · 97/100Static analysis complete

Win7 Simu

com.visnalize.win7simuBuild 4.7.1 · 2026-10-11 19:09 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

ALYKA Health

com.alykahealth.phr.prod01Build 2026.10.0869 · 2026-10-11 19:08 UTC

1 matching category · 3 matching occurrences

A · 92/100Static analysis complete

Screen Recorder & Editor: Zero

com.zero.screen.recorderBuild 1.1 · 2026-10-11 18:54 UTC

1 matching category · 2 matching occurrences

B · 86/100Static analysis complete

PBS KIDS Games

org.pbskids.gamesappBuild 6.13.0 · 2026-10-11 18:52 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Digicel Call International

com.digicel.servicesBuild 2.8.1 · 2026-10-11 18:49 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Atlantic Mobile Banking

com.atlanticfcu.atlanticfcuBuild 4022.2.2 · 2026-10-11 18:37 UTC

1 matching category · 3 matching occurrences

A · 96/100Static analysis complete

Map My Run GPS Running Tracker

com.mapmyrun.android2Build 26.7.0 · 2026-10-11 18:34 UTC

3 matching categories · 210 matching occurrences

A · 90/100Static analysis complete

Japan Travel–Trip & Shinkansen

com.navitime.inbound.walkBuild 12.2.5 · 2026-10-11 18:29 UTC

3 matching categories · 4 matching occurrences

B · 83/100Static analysis complete

my car Maintenance Manager

com.anasoftco.mycarBuild 19 · 2026-10-11 18:24 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Neteller – Fast Payments

com.moneybookers.skrillpayments.netellerBuild 3.195.0-2026100515 · 2026-10-11 18:22 UTC

2 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Farber- فاربر

com.iq.farber_applicationBuild 1.4.5 · 2026-10-11 18:17 UTC

1 matching category · 1 matching occurrence

B · 86/100Static analysis complete

myMattel

com.simpplr.cb.mattelBuild 7.3.6 · 2026-10-11 18:15 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

RHB Mobile Banking

com.rhbgroup.rhbmobilebankingBuild 4.2.2 · 2026-10-11 18:12 UTC

3 matching categories · 3 matching occurrences

A · 94/100Static analysis complete

Mi Bitel

com.bitel.selfcareBuild 4.29.0 · 2026-10-11 18:11 UTC

1 matching category · 1 matching occurrence

A · 91/100Static analysis complete