目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-201 通过发送数据的信息暴露 类漏洞列表 356

CWE-201 通过发送数据的信息暴露 类弱点 356 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-201属于信息泄露类漏洞，指代码在向外部实体传输数据时，意外包含了不应被该实体访问的敏感信息。攻击者通常通过拦截网络流量或日志分析，窃取如密码、密钥或个人隐私等机密数据，进而实施身份伪造或进一步渗透。开发者应避免在日志、调试输出或API响应中记录敏感字段，采用数据最小化原则，并对传输内容进行加密与脱敏处理，确保仅传输必要且授权的信息。

MITRE CWE 官方描述
CWE：CWE-201 将敏感信息插入到发送数据中 英文：代码将数据发送给另一个实体，但数据的一部分包含该实体不应访问的敏感信息。
常见影响 (1)
ConfidentialityRead Files or Directories, Read Memory, Read Application Data
Sensitive data may be exposed to attackers.
缓解措施 (4)
RequirementsSpecify which data in the software should be regarded as sensitive. Consider which types of users should have access to which types of data.
ImplementationEnsure that any possibly sensitive data specified in the requirements is verified with designers to ensure that it is either a calculated risk or mitigated elsewhere. Any information that is not necessary to the functionality should be removed in order to lower both the overhead and the possibility of security sensitive data being sent.
System ConfigurationSetup default error messages so that unexpected errors do not disclose sensitive information.
Architecture and DesignCompartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separatio…
代码示例 (1)
The following is an actual MySQL error statement:
Warning: mysql_pconnect(): Access denied for user: 'root@localhost' (Using password: N1nj4) in /usr/local/www/wi-data/includes/database.inc on line 4
Result · SQL
CVE ID标题CVSS风险等级Published
CVE-2025-62026 WordPress plugin Blockspare 安全漏洞 — Blockspare 4.3 Medium2025-10-22
CVE-2025-59578 WordPress plugin ShopMagic 安全漏洞 — ShopMagic 5.8 Medium2025-10-22
CVE-2025-59579 WordPress plugin Simple Job Board 安全漏洞 — Simple Job Board 7.5 High2025-10-22
CVE-2025-53218 WordPress plugin AppExperts 安全漏洞 — AppExperts 5.8 Medium2025-10-22
CVE-2025-53232 WordPress plugin WP Gmail SMTP 安全漏洞 — WP Gmail SMTP 5.8 Medium2025-10-22
CVE-2025-59268 F5 BIG-IP 安全漏洞 — BIG-IP 5.3 Medium2025-10-15
CVE-2024-47569 Fortinet多款产品 安全漏洞 — FortiManager Cloud 4.2 Medium2025-10-14
CVE-2025-43825 Liferay Portal和Liferay DXP 安全漏洞 — Portal 9.1AICriticalAI2025-10-03
CVE-2025-11025 Vimesoft Messaging Platform 安全漏洞 — Vimesoft Corporate Messaging Platform 5.3 Medium2025-09-26
CVE-2025-9958 GitLab 安全漏洞 — GitLab 7.7 High2025-09-26
CVE-2025-60140 WordPress plugin The Tribal 安全漏洞 — The Tribal 5.3 Medium2025-09-26
CVE-2025-60125 WordPress plugin FoodBook 安全漏洞 — FoodBook 5.3 Medium2025-09-26
CVE-2025-60095 WordPress plugin Stackable 安全漏洞 — Stackable 4.3 Medium2025-09-26
CVE-2025-59010 WordPress plugin Permalink Manager Lite 安全漏洞 — Permalink Manager Lite 7.5 High2025-09-26
CVE-2025-58246 WordPress plugin Core 安全漏洞 — WordPress 4.3 Medium2025-09-23
CVE-2025-43814 Liferay Portal和Liferay DXP 安全漏洞 — Portal 4.3AIMediumAI2025-09-22
CVE-2025-57922 WordPress plugin Envíos Coordinadora Woocommerce 安全漏洞 — Envíos Coordinadora Woocommerce 5.3 Medium2025-09-22
CVE-2025-57923 WordPress plugin UK Address Postcode Validation 安全漏洞 — UK Address Postcode Validation 5.3 Medium2025-09-22
CVE-2025-58226 WordPress plugin 3D FlipBook – PDF Flipbook Viewer和Flipbook Image Gallery 安全漏洞 — 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery 5.3 Medium2025-09-22
CVE-2025-58249 WordPress plugin Qubely 安全漏洞 — Qubely 4.3 Medium2025-09-22
CVE-2025-58252 WordPress plugin Getwid 安全漏洞 — Getwid 4.3 Medium2025-09-22
CVE-2025-58649 WordPress plugin All In One SEO Pack 安全漏洞 — All In One SEO Pack 4.3 Medium2025-09-22
CVE-2025-5519 ArgusTech BILGER 安全漏洞 — BILGER 6.5 Medium2025-09-16
CVE-2025-58872 WordPress plugin Simple Price Calculator 安全漏洞 — Simple Price Calculator 6.5 Medium2025-09-05
CVE-2025-44017 Gunosy 安全漏洞 — "Gunosy" App for Android 6.5 -2025-09-02
CVE-2025-55750 gitpod 安全漏洞 — gitpod 6.5 Medium2025-08-29
CVE-2025-48361 WordPress plugin Hesabfa Accounting 安全漏洞 — Hesabfa Accounting 5.3 Medium2025-08-28
CVE-2025-20348 Cisco Nexus Dashboard和Cisco Nexus Dashboard Fabric Controller 安全漏洞 — Cisco Nexus Dashboard 5.0 Medium2025-08-27
CVE-2025-43768 Liferay Portal和Liferay DXP 安全漏洞 — Portal 6.5AIMediumAI2025-08-23
CVE-2025-41415 AVEVA PI Integrator 安全漏洞 — PI Integrator 6.5 Medium2025-08-21

CWE-201（通过发送数据的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 356 条 CVE 漏洞。