Common Weakness Enumeration

    CWE Definition / CWE-615

    CWE-615: Inclusion of Sensitive Information in Source Code Comments

    While adding general comments is very useful, some programmers tend to leave important data, such as: filenames related to the web application, old links or links which were not meant to be browsed by users, old code fragments, etc.

    Published:7 May 2007
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-540: Inclusion of Sensitive Information in Source Code

    CWE-546: Suspicious Comment