Inclusion of Sensitive Information in Source Code Comments
CWE-615
The product's source code includes comments that contain sensitive information, such as filenames related to the application, old links or links that were not meant to be browsed by users, old code fragments, etc.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.5.
How this weakness is prevented
- Distribution: Remove comments which have sensitive information about the design/implementation of the application. Some of the comments may be exposed to the user and affect the security posture of the application.
Latest Inclusion of Sensitive Information in Source Code Comments vulnerabilities
- 7.5 High severity
macro-pdfviewer: Inclusion of Sensitive Information in Source Code Comments
macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Delegate my view right" feature as long as the attacker can view a page whose last author has access to the attachme