Insertion of Sensitive Information into Externally-Accessible File or Directory
CWE-538
The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
We track 20 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.3.
How this weakness is prevented
- Architecture and Design Operation System Configuration: Do not expose file and directory information to the user.
Latest Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerabilities
- 7.5 High severity
iDentalSoft: Insertion of Sensitive Information into Externally-Accessible File or Directory
Dental practice sites hosted with iDentalSoft send a JSON response to any user who loads certain pages containing sensitive information, including OAuth credentials, password hashes, and PII. Fixed in iDentalSoft 14.0.3.
- 8.2 High severity
JReviews component for Joomla: Insertion of Sensitive Information into Externally-Accessible File or Directory
Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - JReviews caches its full settings table, including the Joomla global configuration secret (copied into cms_secret) and third-party API keys and
- 7.5 High severity
Doofinder for WooCommerce: Insertion of Sensitive Information into Externally-Accessible File or Directory
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a throug
- 9.3 Critical severity
Qexo: Insertion of Sensitive Information into Externally-Accessible File or Directory
Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained
- 7.5 High severity
Red Hat OpenShift AI 2.25: Insertion of Sensitive Information into Externally-Accessible File or Directory
A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization headers and full chat payloads, which may contain personally identifiable information (PII) and secrets, to persistent logs. This sensit
- 8.7 High severity
fission: Execution with Unnecessary Privileges
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, Fission runtime pods were created with ServiceAccountName: fission-fetcher, and the fission-f
- 8.8 High severity
Apache Airflow: Insertion of Sensitive Information into Externally-Accessible File or Directory
A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker container as command-line arguments visible in the pod spec. An authenticated UI/API user with Kubernetes re
- 8.7 High severity
Apache Airflow CNCF Kubernetes provider: Insertion of Sensitive Information into Externally-Accessible File or Directory
JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to running tasks via Task SDK and
- 7.5 High severity
WordPress Plugin Backup Migration: Insertion of Sensitive Information into Externally-Accessible File or Directory
WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file paths. Attackers can enumerate backup directories through configu
- 9.8 Critical severity
Logo j-Platform: Insertion of Sensitive Information into Externally-Accessible File or Directory
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform:
- 8.7 High severity
nixpkgs: Insertion of Sensitive Information into Externally-Accessible File or Directory
Tandoor Recipes is a recipe manager than can be installed with the Nix package manager. Starting in version 23.05 and prior to version 26.05, when using the default configuration of Tandoor Recipes, specifically using SQLite and default `MEDIA_ROOT`, the full
- 9.8 Critical severity
Farm Management System: Improper Limitation of a Pathname to a Restricted Directory
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manipulation results in file and directory information exposure. The attack may be performed from remote. The exploit has bee
- 7.1 High severity
Dom: Exposure of Sensitive Information to an Unauthorized Actor
phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom workflow run artifact. The ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact. This artifact is a zip of the cu
- 8.8 High severity
Advanced File Manager Shortcodes: Insertion of Sensitive Information into Externally-Accessible File or Directory
The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. This makes it possible for attackers with contributor access or higher to read the contents of arbitrary files on the serv
- 7.3 High severity
Samsung_Portable_SSD_T5_Software_for_Windows: Insertion of Sensitive Information into Externally-Accessible File or Directory
An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execut
- 9.8 Critical severity
Data Protection Search: Insertion of Sensitive Information into Externally-Accessible File or Directory
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss
- 7.5 High severity
lte-pic32-writer: Insertion of Sensitive Information into Externally-Accessible File or Directory
lte-pic32-writer is a writer for PIC32 devices. In versions 0.0.1 and prior, those who use `sendto.txt` are vulnerable to attackers who known the IMEI reading the sendto.txt. The sendto.txt file can contain the SNS(such as slack and zulip) URL and API key. As
- 7.8 High severity
Red Hat OpenShift Container Platform 4.11: Improper Control of Dynamically-Managed Code Resources
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
- 7.5 High severity
angular-server-side-configuration: Exposure of Sensitive Information to an Unauthorized Actor
angular-server-side-configuration helps configure an angular application at runtime on the server or in a docker container via environment variables. angular-server-side-configuration detects used environment variables in TypeScript (.ts) files during build ti
- 7.8 High severity
weave-gitops: Files or Directories Accessible to External Parties
Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in GitOps run could allow a local user or process to alter a Kubernetes cluster's resources. GitOps run