Exposure of Sensitive Information Through Data Queries
CWE-202
When trying to keep information confidential, an attacker can often infer some of the information by using statistics.
We track 15 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0.
How this weakness is prevented
- Architecture and Design: This is a complex topic. See the for a good discussion of best practices.
Latest Exposure of Sensitive Information Through Data Queries vulnerabilities
- 8.1 High severity
Apache Answer: Exposure of Sensitive Information Through Data Queries
vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform actions on non-public content they were not permitted to access. Users are recommended to upgrade to version 2.
- 8.7 High severity
Improper input validation and Exposure of sensitive information through data queries…
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V
- 7.3 High severity
NeuVector: Exposure of Sensitive Information Through Data Queries
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
- 8.5 High severity
Flowise: Exposure of Sensitive Information to an Unauthorized Actor
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise GET /api/v1/upsert-history returns the entire server-wide upsert history instead of being scoped to the requesting user, tenant, or work
- 7.5 High severity
free5gc: Exposure of Sensitive Information to an Unauthorized Actor
Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions 4.2.1 and below contain an information disclosure vulnerability in the UDR (Unified Data Repository) service. The handler for GET /nudr-dr/v2/application-
- 7.5 High severity
Apache SkyWalking: Exposure of Sensitive Information Through Data Queries
The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue.
- 9.1 Critical severity
cms: Allocation of Resources Without Limits or Throttling
Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 3.0.0 through 4.16.16, unauthenticated users can trigger database backup operations via specific admin actions, potentially leading to resource exhaustion or informa
- 7.5 High severity
phpMyFAQ: Exposure of Sensitive Information Through Data Queries
phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a configuration backup ZIP via `POST /api/setup/backup` and then download the generated ZIP from a web-accessible location
- 9.8 Critical severity
dragonfly: Improper Limitation of a Pathname to a Restricted Directory
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitra
- 7.5 High severity
Wyse Management Suite: Exposure of Sensitive Information Through Data Queries
Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosu
- 7.5 High severity
Wyse Management Suite: Exposure of Sensitive Information Through Data Queries
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclos
- 8.2 High severity
audiobookshelf: Exposure of Sensitive Information Through Data Queries
Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can
- 7.5 High severity
RESTful Web Services: Exposure of Sensitive Information Through Data Queries
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.
- 7.5 High severity
Netahsilat: Exposure of Sensitive Information Through Data Queries
Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resourc
- 7.5 High severity
Post Grid: Exposure of Sensitive Information Through Data Queries
The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.68 via the 'get_posts' REST API Endpoint. This makes it possible for unauthenticated attackers to extract