cve.bz

CWE-530: Exposure of Backup File to an Unauthorized Control Sphere

Filter

A backup file is stored in a directory or archive that is made accessible to unauthorized actors.

What the weakness is: CWE-530 at MITRE. All weaknesses

Ask an AI about CWE-530

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-530: Exposure of Backup File to an Unauthorized Control Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/530.html and https://cve.bz/cve/cwe/530?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.2CVE-2014-125136EPSS 0.4%

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory. Unauthenticated at…

  2. 0.9CVE-2026-13514EPSS 0.2%

    A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.chess. This manipulation causes exposure of backup file to …

  3. 8.8CVE-2024-56462EPSS 0.5%

    IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underlying operating system.

  4. 1.1CVE-2026-2974EPSS 0.1%

    A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file shared_prefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/ref…

  5. 8.7CVE-2020-36899EPSS 1.0%

    QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx …

  6. 0.0CVE-2025-3773EPSS 0.1%

    A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder.

  7. 7.5CVE-2024-12330EPSS 0.5%

    The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes it…

  8. 2.4CVE-2024-3430EPSS 0.2%

    A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of back…

  9. 2.4CVE-2024-3128EPSS 0.3%Unsupported when assigned

    A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects some unknown processing of the file androidmanifest.xml of the component Backup File Handler. The manipulation lea…

  10. 2.4CVE-2024-3124EPSS 0.3%

    A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of bac…

  11. 1.8CVE-2024-2567EPSS 0.2%Unsupported when assigned

    A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads…

  12. 4.6CVE-2024-2364EPSS 0.3%

    A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file t…

  13. 7.5CVE-2023-5297EPSS 0.8%

    A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control …