CWE-538
Insertion of Sensitive Information into Externally-Accessible File or Directory
The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
We have discovered 1,142 live websites that are affected by CWE-538.
CVEs
- Count - 3
CWE References
Website Distribution by Country
Number of websites using CWE-538 United States | 351 websites |
 Germany | 105 websites |
 India | 87 websites |
 GB | 68 websites |
 Poland | 36 websites |
 Netherlands | 36 websites |
 France | 35 websites |
 Singapore | 25 websites |
 South Africa | 24 websites |
 Canada | 20 websites |
Website Distribution by TLD
Number of websites using CWE-538| .com | 563 websites |
| .org | 50 websites |
| .de | 40 websites |
| .pl | 27 websites |
| .net | 26 websites |
| .co.uk | 25 websites |
| .nl | 20 websites |
| .eu | 18 websites |
| .it | 16 websites |
| .fr | 10 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-538| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Apr, 2026 | CVE-2026-33705 | Chamilo LMS has unauthenticated access to Twig template source files exposes application logic | 10 |
| Oct, 2023 | CVE-2023-4933 | WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing | 962 |
| Sep, 2023 | CVE-2023-4480 | Arbitrary File Read in Fusion File Manager | 170 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-538| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Oct, 2023 | CVE-2023-4933 | WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing | 962 |
| Sep, 2023 | CVE-2023-4480 | Arbitrary File Read in Fusion File Manager | 170 |
| Apr, 2026 | CVE-2026-33705 | Chamilo LMS has unauthenticated access to Twig template source files exposes application logic | 10 |
Websites affected by CWE-538
Top websites that are affected by CWE-538. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| **********.**.uk | United States | **,*** | |
| **********.com | United States | ***,*** | |
| *********.com | GB | ***,*** | |
| **********************.***.uk | GB | ***,*** | |
| **********************.com | United States | ***,*** | |
| *********.com | United States | ***,*** | |
| *********.com | United States | ***,*** | |
| ********.com |  Korea, South | ***,*** | |
| *****.***.za | South Africa | ***,*** | |
| ***********.com | United States | ***,*** |