CWE-1230 · Information Disclosure
Exposure of Sensitive Information Through Metadata
26CVEs
SortMost likely exploited
26 CVEs with CWE-1230 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-9447Exposure of Sensitive Information in transformeroptimus/superagitransformeroptimus · transformeroptimus/superagi · CVSS 6.5 · 2025-03-20 | 6.5 | 0.6% | 2025-03-20 |
| CVE-2023-1974Exposure of Sensitive Information Through Metadata in answerdev/answeranswerdev · answerdev/answer · CVSS 7.7 · 2023-04-11 | 7.7 | 0.6% | 2023-04-11 |
| CVE-2024-9099Exposure of Private API Keys in lunary-ai/lunarylunary-ai · lunary-ai/lunary · CVSS 8.8 · 2025-03-20 | 8.8 | 0.6% | 2025-03-20 |
| CVE-2025-0330Exposure of Sensitive Information in berriai/litellmberriai · berriai/litellm · CVSS 7.5 · 2025-03-20 | 7.5 | 0.6% | 2025-03-20 |
| CVE-2023-6962WP Meta SEO <= 4.5.12 - Information Exposure via Meta Descriptionjoomunited · WP Meta SEO · CVSS 5.3 · 2024-05-02 | 5.3 | 0.4% | 2024-05-02 |
| CVE-2024-47517Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM accessArista Networks · Arista Edge Threat Management · CVSS 6.8 · 2025-01-10 | 6.8 | 0.4% | 2025-01-10 |
| CVE-2026-14351Exposure of Sensitive Information Through Metadata in GitLabGitLab · GitLab · CVSS 4.3 · 2026-07-29 | 4.3 | 0.4% | 2026-07-29 |
| CVE-2023-32488Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to i…Dell · PowerScale OneFS · CVSS 5.3 · 2023-08-16 | 5.3 | 0.4% | 2023-08-16 |
| CVE-2026-49270Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)Apache Software Foundation · Apache ActiveMQ Broker · CVSS 5.9 · 2026-06-01 | 5.9 | 0.4% | 2026-06-01 |
| CVE-2025-26527Non-searchable tags can still be discovered on the tag search page and in the tags blockMoodle Project · moodle · CVSS 5.3 · 2025-02-24 | 5.3 | 0.4% | 2025-02-24 |
| CVE-2025-48941MyBB may disclosure unviewable threads' titles in searchesmybb · mybb · CVSS 5.3 · 2025-06-02 | 5.3 | 0.4% | 2025-06-02 |
| CVE-2025-1921Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (C…Google · Chrome · CVSS 6.5 · 2025-03-05 | 6.5 | 0.3% | 2025-03-05 |
| CVE-2026-29055Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PIITandoorRecipes · recipes · CVSS 5.3 · 2026-03-26 | 5.3 | 0.3% | 2026-03-26 |
| CVE-2024-8910HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_iddevitemsllc · HT Mega Addons for Elementor – Elementor Widgets & Template Builder · CVSS 4.3 · 2024-09-25 | 4.3 | 0.3% | 2024-09-25 |
| CVE-2024-53291Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potential…Dell · NativeEdge · CVSS 7.5 · 2024-12-25 | 7.5 | 0.3% | 2024-12-25 |
| CVE-2024-49395Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockRedhat · mutt · CVSS 5.3 · 2024-11-12 | 5.3 | 0.3% | 2024-11-12 |
| CVE-2026-27661A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as infor…Siemens · SINEC Security Monitor · CVSS 4.3 · 2026-03-10 | 4.3 | 0.3% | 2026-03-10 |
| CVE-2025-13084Opto 22 groov View Exposure of Sensitive Information Through MetadataOpto 22 · groov View Server · CVSS 7.6 · 2025-11-26 | 7.6 | 0.3% | 2025-11-26 |
| CVE-2024-10324RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templatesrometheme · RTMKit · CVSS 4.3 · 2025-01-24 | 4.3 | 0.3% | 2025-01-24 |
| CVE-2025-8713PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablePostgreSQL · CVSS 3.1 · 2025-08-14 | 3.1 | 0.3% | 2025-08-14 |
| CVE-2026-45544Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewServicenextcloud · security-advisories · CVSS 4.3 · 2026-06-01 | 4.3 | 0.2% | 2026-06-01 |
| CVE-2025-47324Exposure of Sensitive Information Through Metadata in Powerline Communication FirmwareQualcomm, Inc. · Snapdragon · CVSS 7.5 · 2025-08-06 | 7.5 | 0.2% | 2025-08-06 |
| CVE-2023-50458In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.dradisframework · Dradis · CVSS 3.5 · 2025-07-10 | 3.5 | 0.2% | 2025-07-10 |
| CVE-2025-30038Session ID leakage in Zone.Identifier of downloaded filesCGM · CGM CLININET · CVSS 7.3 · 2025-08-27 | 7.3 | 0.2% | 2025-08-27 |
| CVE-2025-31959HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.HCL Software · BigFix Service Management (SM) · CVSS 3.5 · 2026-05-06 | 3.5 | 0.1% | 2026-05-06 |
| CVE-2025-59601Exposure of Sensitive Information Through Metadata in Powerline Communication FirmwareQualcomm, Inc. · Snapdragon · CVSS 6.5 · 2026-06-01 | 6.5 | 0.1% | 2026-06-01 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.