Skip to content
OpenAdvisories

Weakness (CWE)

CWE-530: Exposure of Backup File to an Unauthorized Control Sphere

Variant Incomplete

A backup file is stored in a directory or archive that is made accessible to unauthorized actors.

How to prevent it (1 mitigation)

  1. Policy

    Recommendations include implementing a security policy within your organization that prohibits backing up web application source code in the webroot.

Source: MITRE CWE-530

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-13514

    Chess Play and Learn App com.chess AndroidManifest.xml backup

    A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.chess. This manipulation causes exposure of backup file to an unauthorized cont…

    Chess Play and Learn App
  • Low 2.5
    CVE-2026-2974

    AliasVault App Backup aliasvault.xml backup

    A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file shared_prefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/k…

  • Low 2.4
    CVE-2024-3430

    QKSMS Backup File androidmanifest.xml backup

    A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauth…

  • Low 2.4
    CVE-2024-3128

    Replify-Messenger Backup File androidmanifest.xml backup

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects some unknown processing of the file androidmanifest.xml of the component Backup File Handler. The mani…

  • Low 2.4
    CVE-2024-3124

    fridgecow smartalarm Backup File androidmanifest.xml backup

    A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unaut…

    fridgecow smartalarm
  • Low 1.8
    CVE-2024-2567

    jurecapuder AndroidWeatherApp Backup File androidmanifest.xml backup

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipu…

    jurecapuder AndroidWeatherApp
  • Low 1.8
    CVE-2024-2364

    Musicshelf Backup androidmanifest.xml backup

    A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized co…

  • Low 3.7
    CVE-2023-5297

    Xinhu RockOA start backup

    A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possib…

    Xinhu RockOA