Skip to content
OpenAdvisories

Weakness (CWE)

CWE-541: Inclusion of Sensitive Information in an Include File

Variant Incomplete

If an include file source is accessible, the file can contain usernames and passwords, as well as sensitive information pertaining to the application and system.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Do not store sensitive information in include files.

  2. Architecture and Design, System Configuration

    Protect include files from being exposed.

Source: MITRE CWE-541

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2025-68429

    Storybook manager bundle may expose environment variables during build

    Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in versions 7.0.0 and prior to versions 7.6.21, 8.6.15, 9.1.17, and 10.1.10 relates to Storybook’s handling of environment variabl…

    storybookjs storybook storybook npm