# CWE-1230.

Every Advisory and CVE whose sources give the weakness CWE-1230, newest first.

## Records, newest first

- [Exposure of Sensitive Information Through Metadata in GitLab](https://agentprime.io/advisories/CVE-2026-14351.md)
  `CVE-2026-14351` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-1230
- [Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware](https://agentprime.io/advisories/CVE-2025-59601.md)
  `CVE-2025-59601` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1230
- [Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService](https://agentprime.io/advisories/CVE-2026-45544.md)
  `CVE-2026-45544` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1230
- [Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability](https://agentprime.io/advisories/GHSA-hf52-78x8-6w3w.md)
  `GHSA-hf52-78x8-6w3w`, `BIT-activemq-2026-49270`, `CVE-2026-49270` · Maven `org.apache.activemq:activemq-all` and 2 more: affected `<5.19.7 || >=6.0.0, <6.2.6`, fixed in `5.19.7`, `6.2.6` · CVSS 5.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1230
- [HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.](https://agentprime.io/advisories/CVE-2025-31959.md)
  `CVE-2025-31959` · CVE record: HCL Software BigFix Service Management (SM) · CVSS 3.5 Low · Not analysed yet · Published 6 May 2026 · Tags: CWE-1230
- [Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII](https://agentprime.io/advisories/CVE-2026-29055.md)
  `CVE-2026-29055` · CVE record: TandoorRecipes recipes · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-1230
- [A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).](https://agentprime.io/advisories/CVE-2026-27661.md)
  `CVE-2026-27661` · CVE record: Siemens SINEC Security Monitor · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-1230
- [Opto 22 groov View Exposure of Sensitive Information Through Metadata](https://agentprime.io/advisories/CVE-2025-13084.md)
  `CVE-2025-13084` · CVE record: Opto 22 groov View Server and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 26 Nov 2025 · Tags: CWE-1230
- [Session ID leakage in Zone.Identifier of downloaded files](https://agentprime.io/advisories/CVE-2025-30038.md)
  `CVE-2025-30038` · CVE record: CGM CGM CLININET · CVSS 7.3 High · Not analysed yet · Published 27 Aug 2025 · Tags: CWE-1230
- [PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table](https://agentprime.io/advisories/CVE-2025-8713.md)
  `CVE-2025-8713` · CVE record: PostgreSQL · CVSS 3.1 Low · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1230
- [Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware](https://agentprime.io/advisories/CVE-2025-47324.md)
  `CVE-2025-47324` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-1230
- [Dradis: In Dradis before 4.11.0, the Output Console shows a job queue that may contain…](https://agentprime.io/advisories/CVE-2023-50458.md)
  `CVE-2023-50458` · CVE record: dradisframework Dradis · CVSS 3.5 Low · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-1230
- [MyBB may disclosure unviewable threads' titles in searches](https://agentprime.io/advisories/CVE-2025-48941.md)
  `CVE-2025-48941` · CVE record: mybb mybb · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-1230
- [LiteLLM Has a Leakage of Langfuse API Keys](https://agentprime.io/advisories/GHSA-879v-fggm-vxw2.md)
  `GHSA-879v-fggm-vxw2`, `CVE-2025-0330`, `PYSEC-2026-1543` · PyPI `litellm`: affected `<=1.52.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-1230
- [Exposure of Private API Keys in lunary-ai/lunary](https://agentprime.io/advisories/CVE-2024-9099.md)
  `CVE-2024-9099` · CVE record: lunary-ai lunary-ai/lunary · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-1230
- [Exposure of Sensitive Information in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9447.md)
  `CVE-2024-9447` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-1230
- [Google Chrome: Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35…](https://agentprime.io/advisories/CVE-2025-1921.md)
  `CVE-2025-1921` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 5 Mar 2025 · Tags: CWE-1230
- [Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block](https://agentprime.io/advisories/GHSA-5r85-6h7f-rg3r.md)
  `GHSA-5r85-6h7f-rg3r`, `BIT-moodle-2025-26527`, `CVE-2025-26527`, `PKSA-zx9m-rnqj-bycy` · Packagist `moodle/moodle`: affected `<4.1.16 || >=4.3.0-beta, <4.3.10 || >=4.4.0-beta, <4.4.6 || >=4.5.0-beta, <4.5.2`, fixed in `4.1.16`, `4.3.10`, `4.4.6`, `4.5.2` · CVSS 5.3 Medium · Not analysed yet · Published 24 Feb 2025 · Tags: CWE-1230
- [RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates](https://agentprime.io/advisories/CVE-2024-10324.md)
  `CVE-2024-10324` · CVE record: rometheme RTMKit · CVSS 4.3 Medium · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-1230
- [Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access](https://agentprime.io/advisories/CVE-2024-47517.md)
  `CVE-2024-47517` · CVE record: Arista Networks Arista Edge Threat Management · CVSS 6.8 Medium · Not analysed yet · Published 10 Jan 2025 · Tags: CWE-1230
- [Dell NativeEdge: Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information…](https://agentprime.io/advisories/CVE-2024-53291.md)
  `CVE-2024-53291` · CVE record: Dell NativeEdge · CVSS 7.5 High · Not analysed yet · Published 25 Dec 2024 · Tags: CWE-1230
- [Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block](https://agentprime.io/advisories/CVE-2024-49395.md)
  `CVE-2024-49395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1230
- [HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id](https://agentprime.io/advisories/CVE-2024-8910.md)
  `CVE-2024-8910` · CVE record: devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder · CVSS 4.3 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-1230
- [Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer](https://agentprime.io/advisories/GHSA-8jg3-rx43-3fv4.md)
  `GHSA-8jg3-rx43-3fv4`, `CVE-2023-1974`, `GO-2023-1718` · Go `github.com/answerdev/answer`: affected `<1.0.8`, fixed in `1.0.8` · CVSS 7.7 High · Not analysed yet · Published 20 Aug 2024 · Tags: CWE-1230
- [WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description](https://agentprime.io/advisories/CVE-2023-6962.md)
  `CVE-2023-6962` · CVE record: joomunited WP Meta SEO · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2024 · Tags: CWE-1230
- [Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS.](https://agentprime.io/advisories/CVE-2023-32488.md)
  `CVE-2023-32488` · CVE record: Dell PowerScale OneFS · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: CWE-1230

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1230>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1230/>. Everything for agents: <https://agentprime.io/llms.txt>.