CWE-1230.

Exposure of Sensitive Information Through Metadata in GitLab

• GitLab
• CWE-1230

Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

• Qualcomm, Inc. Snapdragon
• CWE-1230

Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService

• nextcloud security-advisories
• CWE-1230

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability

• CWE-1230

<5.19.7 || >=6.0.0, <6.2.6 · fixed in 5.19.7, 6.2.6

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.

• HCL Software BigFix Service Management (SM)
• CWE-1230

Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII

• recipes
• CWE-1230

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).

• Siemens SINEC Security Monitor
• CWE-1230

Opto 22 groov View Exposure of Sensitive Information Through Metadata

• Opto 22 groov View Server
• Opto 22 GRV-EPIC-PR1 Firmware
• CWE-1230

Session ID leakage in Zone.Identifier of downloaded files

• CGM CLININET
• CWE-1230

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

• PostgreSQL
• CWE-1230

Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

• Qualcomm, Inc. Snapdragon
• CWE-1230

Dradis: In Dradis before 4.11.0, the Output Console shows a job queue that may contain…

• Dradis
• CWE-1230

MyBB may disclosure unviewable threads' titles in searches

• mybb
• CWE-1230

LiteLLM Has a Leakage of Langfuse API Keys

• CWE-1230

<=1.52.1 · no fixed version yet

Exposure of Private API Keys in lunary-ai/lunary

• lunary-ai/lunary
• CWE-1230

Exposure of Sensitive Information in transformeroptimus/superagi

• transformeroptimus/superagi
• CWE-1230

Google Chrome: Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35…

• Google Chrome
• CWE-1230

Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block

• CWE-1230

<4.1.16 || >=4.3.0-beta, <4.3.10 || >=4.4.0-beta, <4.4.6 || >=4.5.0-beta, <4.5.2 · fixed in 4.1.16, 4.3.10, 4.4.6, 4.5.2

RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

• rometheme RTMKit
• CWE-1230

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access

• Arista Networks Arista Edge Threat Management
• CWE-1230

Dell NativeEdge: Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information…

• Dell NativeEdge
• CWE-1230

Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1230

HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id

• devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
• CWE-1230

Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

• CWE-1230

<1.0.8 · fixed in 1.0.8

WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description

• joomunited WP Meta SEO
• CWE-1230

Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS.

• Dell PowerScale OneFS
• CWE-1230