Falhas do tipo CWE-598

98 resultados

Transmissão de dados sensíveis em query string HTTP

A aplicação envia informações sensíveis (senhas, tokens, chaves) como parâmetros de query (URL) em requisições HTTP. Isso expõe os dados em logs de servidor, histórico de browser, proxies intermediários e tráfego de rede — qualquer camada que processa ou registra URLs consegue capturar a informação.

Exemplo

Uma página de login que direciona para 'https://app.com/validar?usuario=joao&senha=abc123' coloca a credencial diretamente visível na URL. Se houver um redirect HTTP→HTTPS ou um proxy corporativo, a senha fica registrada em múltiplos logs; malware no navegador captura pelo histórico.

Como mitigar

Sempre transmita dados sensíveis via POST (não GET/query string) com body encriptado (HTTPS mandatório). Use session tokens ou bearer tokens em headers Authorization em vez de credenciais diretas na URL. Valide e sanitize logs para não registrar parâmetros sensíveis.

CVE-2026-37504MEDIUMSensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyController.php, the server auEPSS 0.3%CVE-2026-43875MEDIUMWWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account TakeoverEPSS 0.3%CVE-2025-59873MEDIUMSession Token Exposure via URL Query ParametersEPSS 0.3%CVE-2026-61614MEDIUMSolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser historyEPSS 0.3%CVE-2025-40742MEDIUMA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 EPSS 0.3%CVE-2026-33620MEDIUMPinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary SystemsEPSS 0.3%CVE-2026-26721HIGHAn issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via tEPSS 0.3%CVE-2026-34969LOWNhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider CallbackEPSS 0.3%CVE-2025-50110HIGHAn issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse mEPSS 0.3%CVE-2025-36371MEDIUMIBM i Information DisclosureEPSS 0.3%CVE-2026-66832MEDIUMMira Hormone Monitor, Mira Android App Use of GET request method with sensitive query stringsEPSS 0.3%CVE-2026-26196MEDIUMGogs: Access tokens get exposed through URL params in API requestsEPSS 0.3%CVE-2026-55375MEDIUMcanto-saas-api: OAuth credentials exposed in URL query string and exception messagesEPSS 0.3%CVE-2024-28238LOWSession Token in URL in directusEPSS 0.2%CVE-2026-9592HIGHSensitive Information Disclosure in HTTP headerEPSS 0.2%CVE-2022-25787HIGHGTA URLs issued by LMM WEB API may leak informationEPSS 0.2%CVE-2023-6287LOWBackup password in GET parameterEPSS 0.2%CVE-2025-14808LOWIBM InfoSphere Information Server is vulnerable due to disclosure of sensitive informationEPSS 0.2%CVE-2023-22307MEDIUMSite-Passwords in GET parametersEPSS 0.2%CVE-2025-26058MEDIUMWebkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, EPSS 0.2%