CWE-1230 · 26 records

Exposure of Sensitive Information Through Metadata

CVEs in this class

26 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2024-9099No exploit	Exposure of Private API Keys in lunary-ai/lunarylunary · lunary · CWE-1230	High8.1	—	0.5%	Mar 20, 2025
30Monitor	CVE-2025-0330No exploit	Exposure of Sensitive Information in berriai/litellmlitellm · litellm · CWE-1230 Pre-auth	High7.5	—	0.5%	Mar 20, 2025
30Monitor	CVE-2024-53291No exploit	Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability.dell · nativeedge orchestrator · CWE-1230 Pre-auth	High7.5	—	0.3%	Dec 25, 2024
30Monitor	CVE-2025-47324No exploit	Exposure of Sensitive Information Through Metadata in Powerline Communication Firmwarequalcomm · qca7005 firmware · CWE-1230 Pre-auth	High7.5	—	0.2%	Aug 6, 2025
29Monitor	CVE-2025-30038No exploit	Session ID leakage in Zone.Identifier of downloaded filescgm · cgm clininet · CWE-1230	High7.3	—	0.1%	Aug 27, 2025
27Monitor	CVE-2024-47517No exploit	Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM accessarista · ng firewall · CWE-1230	Medium6.8	—	0.4%	Jan 10, 2025
26Monitor	CVE-2024-9447No exploit	Exposure of Sensitive Information in transformeroptimus/superagisuperagi · superagi · CWE-1230	Medium6.5	—	0.6%	Mar 20, 2025
26Monitor	CVE-2023-1974No exploit	Exposure of Sensitive Information Through Metadata in answerdev/answeranswer · answer · CWE-1230 Pre-auth	Medium6.5	—	0.5%	Apr 11, 2023
26Monitor	CVE-2025-1921No exploit	Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about agoogle · chrome · CWE-1230 Pre-auth	Medium6.5	—	0.3%	Mar 5, 2025
26Monitor	CVE-2025-59601No exploit	Exposure of Sensitive Information Through Metadata in Powerline Communication Firmwarequalcomm · fastconnect 7800 firmware · CWE-1230 Pre-auth	Medium6.5	—	0.1%	Jun 1, 2026
24Monitor	CVE-2025-13084No exploit	Opto 22 groov View Exposure of Sensitive Information Through Metadataopto 22 · groov view server · CWE-1230	Medium6.1	—	0.2%	Nov 26, 2025
23Monitor	CVE-2026-49270No exploit	Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)apache · activemq · CWE-1230 Pre-auth	Medium5.9	—	0.3%	Jun 1, 2026
21Monitor	CVE-2023-6962No exploit	WP Meta SEO <= 4.5.12 - Information Exposure via Meta Descriptionjoomunited · wp meta seo · CWE-1230 Pre-auth	Medium5.3	—	0.4%	May 2, 2024
21Monitor	CVE-2025-26527No exploit	Non-searchable tags can still be discovered on the tag search page and in the tags blockmoodle · moodle · CWE-1230 Pre-auth	Medium5.3	—	0.3%	Feb 24, 2025
21Monitor	CVE-2025-48941No exploit	MyBB may disclosure unviewable threads' titles in searchesmybb · mybb · CWE-1230 Pre-auth	Medium5.3	—	0.3%	Jun 2, 2025
21Monitor	CVE-2026-29055No exploit	Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PIItandoor · recipes · CWE-1230 Pre-auth	Medium5.3	—	0.3%	Mar 26, 2026
21Monitor	CVE-2024-49395No exploit	Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockmutt · mutt · CWE-1230 Pre-auth	Medium5.3	—	0.3%	Nov 12, 2024
21Monitor	CVE-2026-27661No exploit	A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).siemens · sinec security monitor · CWE-1230	Medium5.3	—	0.3%	Mar 10, 2026
17Monitor	CVE-2026-14351No exploit	Exposure of Sensitive Information Through Metadata in GitLabgitlab · gitlab · CWE-1230	Medium4.3	—	0.4%	Jul 29, 2026
17Monitor	CVE-2023-32488No exploit	Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS.dell · powerscale onefs · CWE-1230	Medium4.3	—	0.3%	Aug 16, 2023
17Monitor	CVE-2024-8910No exploit	HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_idhasthemes · ht mega · CWE-1230	Medium4.3	—	0.3%	Sep 25, 2024
17Monitor	CVE-2024-10324No exploit	RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templatesrometheme · romethemekit for elementor · CWE-1230	Medium4.3	—	0.2%	Jan 24, 2025
17Monitor	CVE-2026-45544No exploit	Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewServicenextcloud · tables · CWE-1230	Medium4.3	—	0.2%	Jun 1, 2026
17Monitor	CVE-2023-50458No exploit	In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.dradisframework · dradis · CWE-1230	Medium4.3	—	0.2%	Jul 10, 2025
14Monitor	CVE-2025-31959No exploit	HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.hcltech · bigfix service management · CWE-1230	Low3.5	—	0.1%	May 6, 2026

CVE-2024-9099
32Monitor
Exposure of Private API Keys in lunary-ai/lunary
HighCVSS 8.1No exploitEPSS 0%
lunary · lunaryMar 20, 2025
CVE-2025-0330
30Monitor
Exposure of Sensitive Information in berriai/litellm
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
litellm · litellmMar 20, 2025
CVE-2024-53291
30Monitor
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
dell · nativeedge orchestratorDec 25, 2024
CVE-2025-47324
30Monitor
Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
qualcomm · qca7005 firmwareAug 6, 2025
CVE-2025-30038
29Monitor
Session ID leakage in Zone.Identifier of downloaded files
HighCVSS 7.3No exploitEPSS 0%
cgm · cgm clininetAug 27, 2025
CVE-2024-47517
27Monitor
Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access
MediumCVSS 6.8No exploitEPSS 0%
arista · ng firewallJan 10, 2025
CVE-2024-9447
26Monitor
Exposure of Sensitive Information in transformeroptimus/superagi
MediumCVSS 6.5No exploitEPSS 0%
superagi · superagiMar 20, 2025
CVE-2023-1974
26Monitor
Exposure of Sensitive Information Through Metadata in answerdev/answer
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
answer · answerApr 11, 2023
CVE-2025-1921
26Monitor
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
google · chromeMar 5, 2025
CVE-2025-59601
26Monitor
Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
qualcomm · fastconnect 7800 firmwareJun 1, 2026
CVE-2025-13084
24Monitor
Opto 22 groov View Exposure of Sensitive Information Through Metadata
MediumCVSS 6.1No exploitEPSS 0%
opto 22 · groov view serverNov 26, 2025
CVE-2026-49270
23Monitor
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
apache · activemqJun 1, 2026
CVE-2023-6962
21Monitor
WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
joomunited · wp meta seoMay 2, 2024
CVE-2025-26527
21Monitor
Non-searchable tags can still be discovered on the tag search page and in the tags block
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
moodle · moodleFeb 24, 2025
CVE-2025-48941
21Monitor
MyBB may disclosure unviewable threads' titles in searches
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
mybb · mybbJun 2, 2025
CVE-2026-29055
21Monitor
Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
tandoor · recipesMar 26, 2026
CVE-2024-49395
21Monitor
Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
mutt · muttNov 12, 2024
CVE-2026-27661
21Monitor
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).
MediumCVSS 5.3No exploitEPSS 0%
siemens · sinec security monitorMar 10, 2026
CVE-2026-14351
17Monitor
Exposure of Sensitive Information Through Metadata in GitLab
MediumCVSS 4.3No exploitEPSS 0%
gitlab · gitlabJul 29, 2026
CVE-2023-32488
17Monitor
Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS.
MediumCVSS 4.3No exploitEPSS 0%
dell · powerscale onefsAug 16, 2023
CVE-2024-8910
17Monitor
HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id
MediumCVSS 4.3No exploitEPSS 0%
hasthemes · ht megaSep 25, 2024
CVE-2024-10324
17Monitor
RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
MediumCVSS 4.3No exploitEPSS 0%
rometheme · romethemekit for elementorJan 24, 2025
CVE-2026-45544
17Monitor
Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService
MediumCVSS 4.3No exploitEPSS 0%
nextcloud · tablesJun 1, 2026
CVE-2023-50458
17Monitor
In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
MediumCVSS 4.3No exploitEPSS 0%
dradisframework · dradisJul 10, 2025
CVE-2025-31959
14Monitor
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.
LowCVSS 3.5No exploitEPSS 0%
hcltech · bigfix service managementMay 6, 2026

All vulnerability classes