CWE-598: Use of HTTP Request With Sensitive Query String, page 2
Filter
The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
What the weakness is: CWE-598 at MITRE. OWASP Top 10: A06:2025 Insecure Design
Ask an AI about CWE-598
Show the prompt
Explain CWE-598: Use of HTTP Request With Sensitive Query String and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/598.html and https://cve.bz/cve/cwe/598?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.3CVE-2025-50709EPSS 0.4%
An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter
- 8.8CVE-2025-50110EPSS 0.3%
An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal server URLs, account IDs, passwords, and…
- 6.9CVE-2025-54542EPSS 0.1%
QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user. The vendor was notified early about this vulnerability,…
- 5.7CVE-2025-8997EPSS 0.3%
An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.
- 8.8CVE-2025-57800EPSS 0.5%
Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback URLs during OIDC authentication. An attacker can craft a login link that causes A…
- 5.5CVE-2025-51651EPSS 0.2%
An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request.
- 6.0CVE-2025-40742EPSS 0.3%
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP…
- 6.5CVE-2025-52901EPSS 0.5%
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.33.9, access tokens are used as GET parameters. The JSON Web Token (JWT) …
- 7.5CVE-2025-49188EPSS 0.4%
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.
- 7.5CVE-2025-3943EPSS 11%
Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Fra…
- 5.3CVE-2024-9877EPSS 0.2%
: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4.
- 3.1CVE-2025-3637EPSS 0.4%
A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages …
- 7.5CVE-2025-32021EPSS 0.4%
Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters duri…
- 6.5CVE-2025-24948EPSS 0.3%
In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.
- 6.3CVE-2025-2356EPSS 0.4%
A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query…
- 7.5CVE-2021-41719EPSS 0.4%
Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to process requests that contain sensitive information such as user account name and…
- 6.2CVE-2025-1738EPSS 0.2%
A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party.
- 4.2CVE-2025-26058EPSS 0.2%
Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL.
- 8.7CVE-2025-26473EPSS 0.5%
The Mojave Inverter uses the GET method for sensitive information.
- 5.7CVE-2024-12012EPSS 0.4%
A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of…
- 6.3CVE-2025-0730EPSS 0.7%
A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of …
- 7.5CVE-2025-22387EPSS 0.4%
An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated s…
- 5.9CVE-2024-41738EPSS 0.3%
IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
- 5.1CVE-2024-38863EPSS 0.4%
Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of the token to facilitate targeted phishing attacks.
- 5.7CVE-2024-32931EPSS 0.4%
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.
- 5.3CVE-2023-50954EPSS 0.4%
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force ID: 275776.
- 7.5CVE-2024-23766EPSS 0.4%
An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules…
- 8.2CVE-2024-31206EPSS 0.3%
dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `dectalk-tts@1.0.0`, network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified …
- 3.3CVE-2024-2745EPSS 0.2%
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. …
- 7.5CVE-2023-32335EPSS 0.5%
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referr…
- 2.3CVE-2024-28238EPSS 0.2%
Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclusion of session tokens in URLs poses a security risk as URLs are often logged in various …
- 4.1CVE-2023-45716EPSS 0.1%
Sametime is impacted by sensitive information passed in URL.
- 5.3CVE-2023-50328EPSS 0.5%
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110.
- 5.5CVE-2023-6287EPSS 0.2%
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.
- 9.8CVE-2023-6014EPSS 1.2%
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
- 7.5CVE-2023-37935EPSS 1.1%
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is abl…
- 5.3CVE-2023-25524EPSS 0.4%
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate th…
- 5.5CVE-2023-22307EPSS 0.2%
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.
- 2.7CVE-2022-34452EPSS 0.4%
PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can able to exploit the issue and view sensitive information stored in the logs.
- 6.5CVE-2022-24414EPSS 0.6%
Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. To…
- 6.7CVE-2022-25787EPSS 0.2%
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
- 8.8CVE-2022-22551EPSS 0.4%
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.
- 8.8CVE-2021-36328EPSS 0.9%
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive i…
- 5.3CVE-2021-21594EPSS 0.8%
Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclosure of sensitive data. Dell recommends upgrading at your earliest opportunity.
- 5.5CVE-2020-5331EPSS 0.7%
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache or log files. An authenticated malicious local user with access to the log files…
- 8.8CVE-2019-18573EPSS 1.0%
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious local user could potentially exploit this vulnerability as the …
- 8.1CVE-2019-6531EPSS 1.0%
An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.
- 9.8CVE-2018-14822EPSS 2.9%
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user and execute arbitrary code.
- 6.5CVE-2018-5467EPSS 1.3%
An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vuln…
- 7.5CVE-2017-9280EPSS 1.1%
Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar.