CWE-598 Use of HTTP Request With Sensitive Query String
Description
The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-598 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-pvgv-gcp7-v38g | CVE-2026-107807 | HIGH |
Nginx UI: Node Secret Credential Exposure via URL Query Parameter |
2026-10-09 | |
| GHSA-gj2h-2fpw-fhv9 | - | MODERATE |
@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration |
2026-08-04 | |
| GHSA-ffq7-hh2j-r24p | CVE-2026-50157 | MODERATE | - |
Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter |
2026-07-14 |
| GHSA-37pm-83g7-r22v | CVE-2026-55375 | MODERATE | - |
canto-saas-api: OAuth credentials exposed in URL query string and exception messages |
2026-06-19 |
| GHSA-9pg3-25fq-p6cc | CVE-2026-47768 | MODERATE |
nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs) |
2026-06-10 | |
| GHSA-jvp4-q659-95mj | CVE-2026-44883 | HIGH |
Portainer: JWT accepted in URL query leaks tokens to logs and referers |
2026-06-09 | |
| GHSA-5w8w-26ch-v5cw | CVE-2026-43875 | MODERATE | - |
AVideo: Password Hash Leak in MobileManager OAuth Redirect URL Enables Account Takeover |
2026-05-13 |
| GHSA-g2qj-prgh-4g9r | CVE-2026-34969 | LOW |
Nhost Leaks Refresh Tokens via URL Query Parameter in OAuth Provider Callback |
2026-04-27 | |
| GHSA-gcvm-c75m-h4p4 | CVE-2026-34020 | HIGH |
Apache OpenMeetings Uses GET Request Method With Sensitive Query Strings |
2026-04-10 | |
| GHSA-4rh7-jwg9-m28m | - | MODERATE |
openssl-encrypt accepts refresh tokens as URL query parameters causing token leakage |
2026-04-01 | |
| GHSA-mrqc-3276-74f8 | CVE-2026-33620 | MODERATE |
PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems |
2026-03-27 | |
| GHSA-x9p5-w45c-7ffc | CVE-2026-26196 | MODERATE |
Gogs: Access tokens get exposed through URL params in API requests |
2026-03-06 | |
| GHSA-rmwh-g367-mj4x | CVE-2025-52901 | MODERATE |
File Browser allows sensitive data to be transferred in URL |
2025-08-04 | |
| GHSA-9vc3-vm42-fjhm | CVE-2025-3637 | LOW | - |
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter |
2025-04-25 |
| GHSA-m67m-3p5g-cw9j | CVE-2025-32021 | LOW |
VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext |
2025-04-15 | |
| GHSA-6cxr-8q3m-jwrr | CVE-2023-6020 | CRITICAL |
Ray Missing Authorization vulnerability |
2025-01-09 | |
| GHSA-6cf6-8hvr-r68w | CVE-2024-31206 | HIGH |
dectalk-tts Uses Unencrypted HTTP Request |
2024-04-05 | |
| GHSA-2ccr-g2rv-h677 | CVE-2024-28238 | LOW |
Session Token in URL in directus |
2024-03-13 | |
| GHSA-4qq5-mxxx-m6gg | CVE-2023-6014 | CRITICAL |
MLflow authentication requirement bypass can allow a user to arbitrarily create an account |
2024-03-01 |