Common Weakness Enumeration
CWE-219 Storage of File with Sensitive Data Under Web Root
Description
The product stores sensitive data under the web document root with insufficient access control, which might make it accessible to untrusted parties.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-219 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-g4c3-4g96-6g4m | CVE-2026-45140 | CRITICAL | - |
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution |
2026-09-17 |
| GHSA-xvp7-8vm8-xfxx | - | MODERATE |
Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers |
2026-06-08 | |
| GHSA-49w6-73cw-chjr | CVE-2024-56159 | HIGH |
Astro's server source code is exposed to the public if sourcemaps are enabled |
2025-11-27 |