CWE-201

Insertion of Sensitive Information Into Sent Data

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

368 vulnerabilities with CWE-201

CVE-2024-4536 MEDIUM

Eclipse EDC Connector 0.2.1-0.6.2 - OAuth2 Client Secret Exposure via Data Sink Configuration

CVSS 6.8

CVE-2024-32825 HIGH

Patrick Posner Simply Static <3.1.3 - Info Disclosure

CVSS 7.5

CVE-2024-32796 MEDIUM

Very Good Plugins WP Fusion Lite - Info Disclosure

CVSS 4.3

CVE-2024-32782 MEDIUM

HT Mega for Elementor <= 2.4.7 - Sensitive Data Exposure

CVSS 4.3

CVE-2024-32028 MEDIUM

OpenTelemetry dotnet - Info Disclosure

CVSS 4.1

CVE-2024-31278 MEDIUM

Premium Addons for Elementor <= 4.10.22 - Sensitive Data Exposure

CVSS 4.3

CVE-2024-28173 MEDIUM

JetBrains TeamCity <2023.11.4 - Info Disclosure

CVSS 4.3

CVE-2024-1435 MEDIUM

tainacan Tainacan <= 0.20.6 - Sensitive Data Exposure via Log File

CVSS 5.3

CVE-2024-26270 MEDIUM

Liferay Portal/DXP - Info Disclosure

CVSS 6.5

CVE-2024-25150 MEDIUM

Liferay Portal/DXP - Info Disclosure

CVSS 4.3

CVE-2024-25148 MEDIUM

Liferay Portal/DXP <7.4.1-SP3, 7.2<FP15 - Privilege Escalation

CVSS 5.4

CVE-2024-23506 HIGH

InstaWP Connect <= 0.1.0.9 - Sensitive Data Exposure

CVSS 7.7

CVE-2023-38013 MEDIUM

IBM Cloud Pak System <2.3.3.7 - Info Disclosure

CVSS 5.3

CVE-2023-6916 HIGH

OpenAPI <version> - Info Disclosure

CVSS 7.2

CVE-2023-49261 HIGH

Token Key Disclosure - Info Disclosure

CVSS 7.5

CVE-2023-49594 MEDIUM

DuoUniversalKeycloakAuthenticator < 1.0.8 - Information Disclosure via Challenge Functionality

CVSS 4.5

CVE-2023-3949 MEDIUM

GitLab <16.4.3-16.5.3-16.6.1 - Info Disclosure

CVSS 5.3

CVE-2023-48240 CRITICAL

XWiki 11.10.1-14.10.14 - Cookie Theft and Server-Side Request Forgery via Diff Image Embedding

CVSS 9.0

CVE-2023-3399 HIGH

GitLab EE <16.3.6, <16.4.2, <16.5.1 - Info Disclosure

CVSS 8.5

CVE-2023-5831 LOW

GitLab CE/EE <16.3.6, <16.4.2, <16.5.1 - Info Disclosure

CVSS 3.7

CVE-2023-32275 MEDIUM

SoftEther VPN 4.41-9782-beta and 5.01.9674 - Information Disclosure via CtEnumCa()

CVSS 5.5

CVE-2023-3413 MEDIUM

GitLab <16.2.8-16.4.1 - Info Disclosure

CVSS 6.5

CVE-2023-4378 MEDIUM

GitLab CE/EE <16.1.5, <16.2.5, <16.3.1 - Info Disclosure

CVSS 5.5

CVE-2023-4002 MEDIUM

GitLab EE <16.0.8, <16.1.3, <16.2.2 - Info Disclosure

CVSS 5.3

CVE-2023-1401 MEDIUM

GitLab DAST Scanner 3.0.29-4.0.5 - Cookie Leak on Redirect

CVSS 5.0

Details

Vulnerabilities 368

Links