Skip to content
OpenAdvisories

Weakness (CWE)

CWE-202: Exposure of Sensitive Information Through Data Queries

Base Draft

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

How to prevent it (1 mitigation)

  1. Architecture and Design

    This is a complex topic. See the [REF-1492] for a good discussion of best practices.

Source: MITRE CWE-202

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2021-32711

    Leak of information via Store-API

    Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API …

    shopware platform shopware/platform Packagist