CWE-541Variant

Inclusion of Sensitive Information in an Include File

Incomplete in the CWE catalog ยท 1 CVE mapped

1
CVEs mapped
7.3
Median CVSS
What it is

If an include file source is accessible, the file can contain usernames and passwords, as well as sensitive information pertaining to the application and system.

Recent examples
7.3cvss
CVE-2025-68429

Storybook manager bundle may expose environment variables during build

๐Ÿšจ A sneaky little oversight in Storybook could expose your `.env` secrets during builds! If your project runs `storybook build`, you might be giving away the keys to the kingdom! ๐Ÿ”‘๐Ÿ˜ฑ Think of it like accidentally including confidential notes in a delivery of your latest project presentation โ€” those notes weren't meant for public eyes! If you build your Storybook in a directory with a `.env` file, it might just slip through the cracks and end up viewable by anyone online. If exposed, sensitive information like API keys and database credentials could be seen by anyone accessing your Storybook deployment. This is absolutely devastating for your project's security, potentially leading to unauthorized access and data breaches! ๐Ÿ”ฅ

HIGH
0%
epss
The record
Technical detail
CWE ID
CWE-541
Abstraction
Variant
Structure
Simple
Status
Incomplete