CWEweakness

CWE-202 Exposure of Sensitive Information Through Data Queries

Medium Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Likelihood of exploit
Medium
Languages
Not Language-Specific
CWE version
5.0

Description

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

Common consequences

• Confidentiality: Read Files or Directories, Read Application Data — Sensitive information may possibly be leaked through data queries accidentally. In situations where data should not be tied to individual users, but a large number of users should be able to make queries that "scrub" the identity of users, it may be possible to get information about a user -- e.g., by specifying search terms that are known to be unique to that user.

Potential mitigations

• [Architecture and Design] This is a complex topic. See the [REF-1492] for a good discussion of best practices.

Observed examples

• CVE-2022-41935: Wiki product allows an adversary to discover filenames via a series of queries starting with one letter and then iteratively extending the match.

Related

Observed example · CVE (1)

  • CVE-2022-41935 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. vulnerability

Child of · CWE (1)

  • CWE-1230 Exposure of Sensitive Information Through Metadata weakness

Referenced by CVE · weakness (48)

  • CVE-2026-105615 PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. vulnerability
  • CVE-2026-110183 PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. vulnerability
  • CVE-2026-100420 A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the… vulnerability
  • CVE-2026-79613 vulnerability in Apache Answer. vulnerability
  • CVE-2026-79620 Exposure of sensitive information through data queries vulnerability in Apache Answer. vulnerability
  • CVE-2026-79633 vulnerability in Apache Answer. vulnerability
  • CVE-2026-106506 Backstage is an open framework for building developer portals. vulnerability
  • CVE-2026-103440 Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows… vulnerability
  • CVE-2026-40533 An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before… vulnerability
  • CVE-2026-77883 Exposure of sensitive information through data queries vulnerability in Apache Syncope. vulnerability
  • CVE-2026-16520 Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians… vulnerability
  • CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data… vulnerability
  • CVE-2026-70473 Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. vulnerability
  • CVE-2026-42797 Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. vulnerability
  • CVE-2026-40245 Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. vulnerability
  • CVE-2026-30778 The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. vulnerability
  • CVE-2026-33530 InvenTree is an Open Source Inventory Management System. vulnerability
  • CVE-2026-3546 The e-shot form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.2. vulnerability
  • CVE-2026-25050 Vendure is an open-source headless commerce platform. vulnerability
  • CVE-2025-68456 Craft is a platform for creating digital experiences. vulnerability
  • CVE-2025-64528 Discourse is an open source discussion platform. vulnerability
  • CVE-2025-69200 phpMyFAQ is an open source FAQ web application. vulnerability
  • CVE-2025-64504 Langfuse is an open source large language model engineering platform. vulnerability
  • CVE-2025-59352 Dragonfly is an open source P2P-based file distribution and image acceleration system. vulnerability
  • CVE-2025-36575 Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. vulnerability
  • CVE-2025-29981 Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. vulnerability
  • CVE-2025-25205 Audiobookshelf is a self-hosted audiobook and podcast server. vulnerability
  • CVE-2024-13255 Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue… vulnerability
  • CVE-2024-20388 A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote… vulnerability
  • CVE-2024-6400 Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat… vulnerability
Show all 48 ›

Referenced by CWE · can also be (1)

  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness