CWE-538 文件和路径信息暴露 类弱点 77 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-538 属于敏感信息泄露漏洞，指产品将敏感数据写入可被未授权主体访问的文件或目录中。攻击者通常通过遍历目录或读取日志、配置文件等外部可访问资源，窃取其中的凭证或隐私数据。开发者应避免在日志或临时文件中记录敏感信息，严格设置文件权限，确保仅授权用户可访问，并使用加密存储替代明文保存。
logger.info("Username: " + usernme + ", CCN: " + ccn);| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-57734 | JetBrains TeamCity 安全漏洞 — TeamCity | 4.3 | Medium | 2025-08-20 |
| CVE-2025-8452 | Brother Industries多款产品 安全漏洞 — DCP-L8410CDW | 4.3 | Medium | 2025-08-12 |
| CVE-2024-51977 | Brother Industries Multiple driver installers for Windows 安全漏洞 — HL-L8260CDN | 5.3 | Medium | 2025-06-25 |
| CVE-2025-20665 | MediaTek Chipsets 安全漏洞 — MT6580, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8175, MT8195, MT8196, MT8321, MT8365, MT8370, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8796, MT8797, MT8798, MT8893 | 5.5AI | Medium AI | 2025-05-05 |
| CVE-2025-31421 | WordPress plugin Srbtranslatin 安全漏洞 — Srbtranslatin | 5.8 | Medium | 2025-04-04 |
| CVE-2025-31558 | WordPress plugin TailPress 安全漏洞 — TailPress | 5.8 | Medium | 2025-04-03 |
| CVE-2025-31550 | WordPress plugin WP-LESS 安全漏洞 — WP-LESS | 5.8 | Medium | 2025-04-01 |
| CVE-2025-27017 | Apache NiFi 安全漏洞 — Apache NiFi | 6.5 | - | 2025-03-12 |
| CVE-2025-27150 | Tuleap 安全漏洞 — tuleap | 5.3 | Medium | 2025-03-04 |
| CVE-2025-22633 | WordPress plugin Give – Divi Donation Modules 安全漏洞 — Give – Divi Donation Modules | 5.8 | Medium | 2025-02-23 |
| CVE-2025-24689 | WordPress plugin Import and export users and customers 安全漏洞 — Import and export users and customers | 5.9 | Medium | 2025-01-27 |
| CVE-2025-22773 | WordPress plugin Htaccess File Editor 安全漏洞 — Htaccess File Editor | 5.3 | Medium | 2025-01-15 |
| CVE-2024-6880 | MegaBIP 安全漏洞 — MegaBIP | 9.1 | - | 2025-01-10 |
| CVE-2025-0194 | GitLab 安全漏洞 — GitLab | 6.5 | Medium | 2025-01-08 |
| CVE-2025-22306 | WordPress plugin Link Whisper Free 安全漏洞 — Link Whisper Free | 5.3 | Medium | 2025-01-07 |
| CVE-2024-47580 | SAP Adobe Document Service 安全漏洞 — SAP NetWeaver AS for JAVA (Adobe Document Services) | 6.8 | Medium | 2024-12-10 |
| CVE-2024-47579 | SAP Adobe Document Service 安全漏洞 — SAP NetWeaver AS for JAVA (Adobe Document Services) | 6.8 | Medium | 2024-12-10 |
| CVE-2022-43933 | Broadcom SANnav 安全漏洞 — SANnav | 4.4 | Medium | 2024-11-21 |
| CVE-2023-7062 | WordPress plugin Advanced File Manager Shortcodes 安全漏洞 — Advanced File Manager Shortcodes | 8.8 | High | 2024-07-10 |
| CVE-2023-5937 | Arc 安全漏洞 — Arc | 3.8 | Low | 2024-05-15 |
| CVE-2024-22045 | Siemens SINEMA Remote Connect 安全漏洞 — SINEMA Remote Connect Client | 7.6 | High | 2024-03-12 |
| CVE-2024-22433 | Dell Data Protection Search 安全漏洞 — Data Protection Search | 8.8 | High | 2024-02-01 |
| CVE-2024-0191 | RRJ Nueva Ecija Engineer Online Portal 安全漏洞 — Nueva Ecija Engineer Online Portal | 5.3 | Medium | 2024-01-02 |
| CVE-2023-4595 | BVRP Software Avanquest Software SLmail 安全漏洞 — SLmail | 7.5 | High | 2023-11-23 |
| CVE-2023-46723 | lte-pic32-writer 安全漏洞 — lte-pic32-writer | 8.9 | High | 2023-10-31 |
| CVE-2022-4318 | Red Hat OpenShift 安全漏洞 — Red Hat OpenShift Container Platform 4.11 | 7.8 | High | 2023-09-25 |
| CVE-2023-38558 | Siemens SIMATIC 安全漏洞 — SIMATIC PCS neo (Administration Console) V4.0 | 5.5 | Medium | 2023-09-14 |
| CVE-2023-4480 | PHPFusion 路径遍历漏洞 — PHPFusion | 5.5 | Medium | 2023-09-05 |
| CVE-2023-28444 | angular-server-side-configuration 信息泄露漏洞 — angular-server-side-configuration | 9.9 | Critical | 2023-03-24 |
| CVE-2022-26329 | Micro Focus NetIQ Identity Manager 安全漏洞 — NetIQ Identity Manager | 1.8 | Low | 2023-01-24 |
CWE-538（文件和路径信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 77 条 CVE 漏洞。