CWE-201

Insertion of Sensitive Information Into Sent Data

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

294 vulnerabilities with CWE-201
CVE-2025-49918 MEDIUM
VikBooking Hotel Booking Engine & PMS <1.8.3 - Info Disclosure
CVSS 5.9
CVE-2025-66126 MEDIUM
wowpress.host Fix Media Library <2.0.0 - Info Disclosure
CVSS 5.3
CVE-2025-66125 MEDIUM
Nitesh Ultimate Auction <4.3.2 - Info Disclosure
CVSS 5.3
CVE-2025-49300 LOW
shinetheme Traveler Option Tree <2.9 - Info Disclosure
CVSS 2.7
CVE-2025-66388 MEDIUM
Apache Airflow <3.1.4 - Info Disclosure
CVSS 6.5
CVE-2025-67721 HIGH
Aircompressor <3.3 - Info Disclosure
CVSS 7.5
CVE-2025-63071 MEDIUM
auxin-elements <2.17.12 - Info Disclosure
CVSS 5.3
CVE-2025-63007 MEDIUM
Metagauss EventPrime <4.2.4.1 - Info Disclosure
CVSS 4.3
CVE-2025-62997 MEDIUM
WP EasyCart <5.8.11 - Info Disclosure
CVSS 5.3
CVE-2025-62994 MEDIUM
WP Messiah WP AI CoPilot <1.2.8 - Info Disclosure
CVSS 4.3
CVE-2025-62109 MEDIUM
INFINITUM FORM Geo Controller <8.9.4 - Info Disclosure
CVSS 5.3
CVE-2025-66566 HIGH
LZ4 Java <1.10.1 - Info Disclosure
CVE-2025-58098 HIGH
Apache HTTP Server <2.4.66 - Command Injection
CVSS 8.3
CVE-2025-13295 HIGH
Argus Technology Inc. BILGER <2.4.9 - Info Disclosure
CVSS 7.5
CVE-2025-20789 MEDIUM
Google Android - Information Disclosure
CVSS 4.4
CVE-2025-66304 MEDIUM
Grav <1.8.0-beta.27 - Info Disclosure
CVSS 6.2
CVE-2025-66035 HIGH
Angular <19.2.16, 20.3.14, 21.0.1 - XSS
CVE-2025-65944 MEDIUM
Sentry-Javascript <10.27.0 - Info Disclosure
CVE-2025-64299 LOW
LogStare Collector - Info Disclosure
CVSS 2.7
CVE-2025-52639 LOW
Hcltech Connections - Information Disclosure
CVSS 3.5
CVE-2025-7000 MEDIUM
GitLab CE/EE <18.3.6-18.5.2 - Info Disclosure
CVSS 4.3
CVE-2025-2615 MEDIUM
GitLab <18.3.6-18.5.2 - Info Disclosure
CVSS 4.3
CVE-2025-64748 MEDIUM
Directus <11.13.0 - Info Disclosure
CVSS 6.5
CVE-2025-64407 MEDIUM
Apache Openoffice < 4.1.16 - Missing Authorization
CVSS 5.3
CVE-2025-59509 MEDIUM
Windows Speech - Info Disclosure
CVSS 5.5
Details
Vulnerabilities 294