Exposure of Sensitive Information Through Metadata

The product prevents direct access to a resource containing sensitive information, but it does not sufficiently limit access to metadata that is derived from the original, sensitive information.

CVEs (26)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-53291 1Dell 1Nativeedge Orchestrator Jun 17, 2026 Dec 25, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...Show more Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.Show less
CVE-2024-49395 3Mutt NeomuttRedhat 3Enterprise Linux MuttNeomutt Jun 26, 2026 Nov 12, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.
CVE-2024-8910 1Hasthemes 1Ht Mega Jun 17, 2026 Sep 25, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.ph...Show more The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.Show less
CVE-2023-6962 1Joomunited 1Wp Meta Seo Jun 17, 2026 May 2, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.12 via the meta description. This makes it possible for unauthenticated attackers to disclose...Show more The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.12 via the meta description. This makes it possible for unauthenticated attackers to disclose potentially sensitive information via the meta description of password-protected posts.Show less
CVE-2023-32488 1Dell 1Powerscale Onefs Jun 17, 2026 Aug 16, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
CVE-2023-1974 1Answer 1Answer Jun 17, 2026 Apr 11, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

Previous 12