Common Weakness Enumeration

CWE-1230 Exposure of Sensitive Information Through Metadata

Description

The product prevents direct access to a resource containing sensitive information, but it does not sufficiently limit access to metadata that is derived from the original, sensitive information.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-1230 ordered by modification date.

4 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-hf52-78x8-6w3w	CVE-2026-49270	MODERATE	maven/org.apache.activemq/activemq-all maven/org.apache.activemq/activemq-broker maven/org.apache.activemq/apache-activemq	Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability	2026-07-09
GHSA-879v-fggm-vxw2	CVE-2025-0330	HIGH	pypi/litellm	LiteLLM Has a Leakage of Langfuse API Keys	2025-03-20
GHSA-5r85-6h7f-rg3r	CVE-2025-26527	MODERATE	-	Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block	2025-02-24
GHSA-8jg3-rx43-3fv4	CVE-2023-1974	MODERATE	golang/github.com/answerdev/answer	Answer vulnerable to Exposure of Sensitive Information Through Metadata	2023-04-19