CWE-598

89 CVEs classified under CWE-598. Browse by severity and year.

Top CVEs for CWE-598
CVESeverityScorePublishedSummary
CVE-2025-69270Critical9.82026-01-12Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue af…
CVE-2023-6014Critical9.82023-11-16An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
CVE-2018-14822Critical9.82018-10-02Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an at…
CVE-2017-3185Critical9.82017-12-16ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests…
CVE-2025-69634Critical9.02026-02-12Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE…
CVE-2025-50110High8.82025-09-15An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sen…
CVE-2025-57800High8.82025-08-22Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback U…
CVE-2021-36328High8.82021-11-30Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability…
CVE-2020-5331High8.82020-05-04RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache…
CVE-2019-18573High8.82019-12-18The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authent…
CVE-2022-22551High8.32022-01-21DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this…
CVE-2025-56551High8.22025-10-03An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-c…
CVE-2024-31206High8.22024-04-04dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `dectalk-tts@1.0.0`, network requests to the third-party API are sent over HTTP, w…
CVE-2021-21594High8.22021-08-16Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclos…
CVE-2026-54652High8.12026-07-08Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer ro…
CVE-2026-23846High8.12026-01-19Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwo…
CVE-2019-6531High8.12019-04-02An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.131…
CVE-2022-24414High7.62022-05-26Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server…
CVE-2026-15322High7.52026-07-17IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs.
CVE-2026-62386High7.52026-07-17The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route (JwtAuthe…
All CVEs classified under CWE-598 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-66832Medium6.52026-08-11When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string para…
CVE-2026-14838High7.42026-08-04Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows…
CVE-2026-47768Medium5.52026-07-28nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redi…
CVE-2026-16207Low3.72026-07-19A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipul…
CVE-2026-15322High7.52026-07-17IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs.
CVE-2026-95922026-07-17SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the sess…
CVE-2026-62386High7.52026-07-17The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route (JwtAuthe…
CVE-2026-54652High8.12026-07-08Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer ro…
CVE-2026-58656High7.52026-07-08Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-Allow-Origin: *, allowing unauthent…
CVE-2026-10078Low2.72026-05-29A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically client_id and client_secret, t…
CVE-2026-44883High7.52026-05-28Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and…
CVE-2026-2237Medium6.22026-05-27A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local…
CVE-2025-62317Low2.62026-05-14HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through bro…
CVE-2026-43875Medium6.82026-05-11WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/MobileManager/oauth2.php completes an OAuth login by sending an HTTP…
CVE-2026-37504Medium5.32026-05-01Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyController.php, the server authentication token…
CVE-2026-34020High7.52026-04-09Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and pa…
CVE-2026-27949Low2.02026-04-07Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentication flow where a user's email address…
CVE-2026-34969High7.52026-04-06Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly i…
CVE-2026-25118High7.52026-04-03immich is a high performance self-hosted photo and video management solution. Prior to version 2.6.0, the Immich application is vulnerable to credential disclo…
CVE-2026-33620Medium4.32026-03-26PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.8` through `v0.8.3` accepted the API token from…
CVE-2025-14808Low3.12026-03-25IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method…
CVE-2026-31381Medium5.32026-03-20An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.
CVE-2025-14811Low3.12026-03-13IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the qu…
CVE-2025-13219Medium5.92026-03-10IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties hav…
CVE-2025-41772High7.52026-03-09An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoin…
CVE-2026-26196Medium5.32026-03-05Gogs is an open source self-hosted Git service. Prior to version 0.14.2, gogs api still accepts tokens in url params like token and access_token, which can lea…
CVE-2025-59873Medium5.92026-02-23An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authenticat…
CVE-2026-26721High7.12026-02-20An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parame…
CVE-2025-69634Critical9.02026-02-12Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE…
CVE-2026-23846High8.12026-01-19Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwo…
CVE-2026-22644Medium5.32026-01-15Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer…
CVE-2025-69270Critical9.82026-01-12Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue af…
CVE-2025-36371Medium6.52025-11-19IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation.  A user with access to the…
CVE-2025-31954Medium5.42025-11-05HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive i…
CVE-2025-32916Medium4.32025-10-09Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive…
CVE-2025-58584Medium5.32025-10-06In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server…
CVE-2025-56551High8.22025-10-03An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-c…
CVE-2025-50709Medium4.32025-09-17An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter
CVE-2025-50110High8.82025-09-15An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sen…
CVE-2025-54542Medium5.52025-08-28QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials…
CVE-2025-89972025-08-25An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.
CVE-2025-57800High8.82025-08-22Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback U…
CVE-2025-51651Medium5.52025-07-14An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a c…
CVE-2025-40742Medium5.32025-07-08A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All…
CVE-2025-52901Medium4.52025-06-30File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to ver…
CVE-2025-49188Medium5.32025-06-12The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.
CVE-2025-3943Medium4.12025-05-22Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security o…
CVE-2024-9877Medium4.32025-04-30: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: throug…
CVE-2025-3637Low3.12025-04-25A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through…
CVE-2025-32021Low2.22025-04-15Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL…
CVE-2025-24948Medium6.52025-04-15In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.
CVE-2025-2356Low3.72025-03-17A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API H…
CVE-2021-41719High7.52025-03-04Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to p…
CVE-2025-1738Medium6.22025-02-27A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive inform…
CVE-2025-26058Medium4.22025-02-18Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application app…
CVE-2025-26473High7.52025-02-13The Mojave Inverter uses the GET method for sensitive information.
CVE-2024-12012Medium5.72025-02-13A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the…
CVE-2025-0730Low3.72025-01-27A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr…
CVE-2025-22387High7.52025-01-04An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is…
CVE-2024-41738Medium5.92024-11-01IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request w…
CVE-2024-38863High7.52024-10-14Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of…
CVE-2024-32931Medium5.72024-08-01Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.
CVE-2023-50954Medium4.32024-06-30IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force…
CVE-2024-23766High7.52024-06-26An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specifi…
CVE-2024-31206High8.22024-04-04dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `dectalk-tts@1.0.0`, network requests to the third-party API are sent over HTTP, w…
CVE-2024-2745Low3.32024-04-02Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through qu…
CVE-2023-32335Low3.72024-03-13IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information di…
CVE-2024-28238Low2.32024-03-12Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclusion of s…
CVE-2023-45716Low1.72024-02-09Sametime is impacted by sensitive information passed in URL.
CVE-2023-50328Low3.72024-02-02IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110.
CVE-2023-6287Low3.32023-11-27Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.
CVE-2023-6014Critical9.82023-11-16An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
CVE-2023-37935Medium6.52023-10-10A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view p…
CVE-2023-25524Medium4.02023-08-03 NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in t…
CVE-2023-22307Medium5.52023-04-18Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.
CVE-2022-34452Low2.72023-02-10 PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can ab…
CVE-2022-24414High7.62022-05-26Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server…
CVE-2022-25787High7.52022-05-04Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. Thi…
CVE-2022-22551High8.32022-01-21DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this…
CVE-2021-36328High8.82021-11-30Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability…
CVE-2021-21594High8.22021-08-16Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclos…
CVE-2020-5331High8.82020-05-04RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache…
CVE-2019-18573High8.82019-12-18The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. An authent…
CVE-2019-6531High8.12019-04-02An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.131…
CVE-2018-14822Critical9.82018-10-02Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an at…
CVE-2018-5467Medium6.52018-03-06An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOP…
CVE-2017-9280Medium4.32018-03-02Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions…
CVE-2017-3185Critical9.82017-12-16ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests…
CVE-2017-8443Medium6.52017-06-30In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kiban…