Weaknesses of type CWE-598

98 results

Transmissão de dados sensíveis em query string de requisição HTTP

A aplicação envia informações confidenciais (senhas, tokens, dados pessoais) como parâmetros na URL em vez de no corpo da requisição. O problema: query strings são registradas em logs do servidor, histórico do navegador, proxies e podem ser capturadas em tráfego não-HTTPS, expondo credenciais ou dados privados.

Example

Um formulário de login que faz GET em `/login?user=joao@email.com&password=senha123` em vez de POST. A URL fica visível no histórico do navegador, nos logs do servidor web e em qualquer proxy intermediário, permitindo recuperação posterior da credencial.

How to mitigate

Use POST ou PUT com o corpo da requisição para dados sensíveis; sempre force HTTPS; nunca passe credenciais, tokens ou dados pessoais como parâmetros de URL. Configure o servidor para não logar query strings de endpoints de autenticação e use a flag Secure + HttpOnly em cookies.

CVE-2026-34020HIGHApache OpenMeetings: Login Credentials Passed via GET Query ParametersEPSS 0.5%CVE-2023-32335LOWIBM Maximo Application Suite information disclosureEPSS 0.5%CVE-2026-50157MEDIUMAuth0 Symfony: Bearer Token Accepted via URL Query Parameter in Auth0 Symfony SDKEPSS 0.5%CVE-2026-23846HIGHTugtainer vulnerable to Password Exposure via URL Query ParameterEPSS 0.5%CVE-2025-26473HIGHOutback Power Mojave Inverter Use of GET Request Method With Sensitive Query StringsEPSS 0.5%CVE-2025-57800HIGHAudiobookshelf vulnerable to OIDC token exfiltration and account takeoverEPSS 0.5%CVE-2026-58656HIGHGrav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query ParameterEPSS 0.5%CVE-2026-25118MEDIUMimmich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared AlbumsEPSS 0.4%CVE-2024-23766HIGHAn issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET rEPSS 0.4%CVE-2025-49188MEDIUMSensitive Data in URLEPSS 0.4%CVE-2022-34452LOW PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An AuthenticateEPSS 0.4%CVE-2026-76179CRITICALEbyte NA111-M Use of GET Request Method With Sensitive Query StringsEPSS 0.4%CVE-2026-62386HIGHGrav < 1.0.0-rc.16 Authentication Bypass via token URL ParameterEPSS 0.4%CVE-2024-38863LOWCSRF token leaked in URL parametersEPSS 0.4%CVE-2026-54652HIGHFrigate viewer can read logs exposing admin and camera credentialsEPSS 0.4%CVE-2025-2356MEDIUMBlackVue App API deviceDelete get request method with sensitive query stringsEPSS 0.4%CVE-2025-58584MEDIUMPlain Text Transmission of Username and Password in the URLEPSS 0.4%CVE-2022-22551HIGHDELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentEPSS 0.4%CVE-2024-12012MEDIUMA CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware verEPSS 0.4%CVE-2024-32931MEDIUMexacqVison - Token Disclosed in URLEPSS 0.4%