Weaknesses of type CWE-598

102 results

Transmissão de dados sensíveis em query string de requisição HTTP

A aplicação envia informações confidenciais (senhas, tokens, dados pessoais) como parâmetros na URL em vez de no corpo da requisição. O problema: query strings são registradas em logs do servidor, histórico do navegador, proxies e podem ser capturadas em tráfego não-HTTPS, expondo credenciais ou dados privados.

Example

Um formulário de login que faz GET em `/login?user=joao@email.com&password=senha123` em vez de POST. A URL fica visível no histórico do navegador, nos logs do servidor web e em qualquer proxy intermediário, permitindo recuperação posterior da credencial.

How to mitigate

Use POST ou PUT com o corpo da requisição para dados sensíveis; sempre force HTTPS; nunca passe credenciais, tokens ou dados pessoais como parâmetros de URL. Configure o servidor para não logar query strings de endpoints de autenticação e use a flag Secure + HttpOnly em cookies.

CVE-2025-32021LOWWeblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintextEPSS 0.4%CVE-2026-55375MEDIUMcanto-saas-api: OAuth credentials exposed in URL query string and exception messagesEPSS 0.4%CVE-2024-12012MEDIUMA CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware verEPSS 0.4%CVE-2025-22387HIGHAn issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where thEPSS 0.4%CVE-2024-32931MEDIUMexacqVison - Token Disclosed in URLEPSS 0.4%CVE-2025-13219MEDIUMMultiple vulnerabilities in IBM Aspera OrchestratorEPSS 0.4%CVE-2021-41719HIGHMaharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using EPSS 0.4%CVE-2025-3637LOWMoodle: csrf token exposure via url in moodle mod_data moduleEPSS 0.4%CVE-2026-61614MEDIUMSolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser historyEPSS 0.4%CVE-2025-56551HIGHAn issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with aEPSS 0.4%CVE-2025-41772HIGHwwwupdate.cgi Session token in URLEPSS 0.4%CVE-2023-25524MEDIUM NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access tokeEPSS 0.4%CVE-2023-50954MEDIUMIBM InfoSphere Information Server information disclosureEPSS 0.4%CVE-2025-50709MEDIUMAn issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameterEPSS 0.4%CVE-2026-58656HIGHGrav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query ParameterEPSS 0.4%CVE-2024-41738MEDIUMIBM TXSeries for Multiplatforms information disclosureEPSS 0.3%CVE-2026-14838HIGHSession Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human ResourcesEPSS 0.3%CVE-2026-62386HIGHGrav < 1.0.0-rc.16 Authentication Bypass via token URL ParameterEPSS 0.3%CVE-2026-43875MEDIUMWWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account TakeoverEPSS 0.3%CVE-2024-31206HIGHUse of Unencrypted HTTP Request in dectalk-ttsEPSS 0.3%