CWE-598 Use of HTTP Request With Sensitive Query String
variantThe web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (107)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6020US | high7.5OT high | Exploit | ||
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. | ||||
| CVE-2018-14822US | critical9.8 | — | ||
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate… | ||||
| CVE-2017-3185US | critical9.8 | — | ||
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensiti… | ||||
| CVE-2025-69270US | critical9.8 | — | ||
Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spect… | ||||
| CVE-2023-6014US | critical9.8 | — | ||
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment. | ||||
| CVE-2026-23846US | critical9.1 | — | ||
Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwords via URL query par… | ||||
| CVE-2022-22551US | high8.8 | — | ||
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hi… | ||||
| CVE-2021-36328US | high8.8 | — | ||
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL comman… | ||||
| CVE-2019-18573US | high8.8 | — | ||
The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authenticated malicious loca… | ||||
| CVE-2025-3943US | high7.5 | — | ||
Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX… | ||||
| CVE-2019-6531US | high8.1 | — | ||
An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker i… | ||||
| CVE-2023-28375US | high7.5 | — | ||
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and di… | ||||
| CVE-2026-44883US | high7.5 | — | ||
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro… | ||||
| CVE-2026-37504US | high7.5 | — | ||
Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyController.php, the server authentication token is accepted via GET p… | ||||
| CVE-2026-34969US | high7.5 | — | ||
Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL… | ||||
| CVE-2026-25118US | high7.5 | — | ||
immich is a high performance self-hosted photo and video management solution. Prior to version 2.6.0, the Immich application is vulnerable to credential disclosure when a user auth… | ||||
| CVE-2025-13219US | high7.5 | — | ||
IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs… | ||||
| CVE-2026-22644US | high7.5 | — | ||
Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could… | ||||
| CVE-2025-58584US | high7.5 | — | ||
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histor… | ||||
| CVE-2025-49188US | high7.5 | — | ||
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan