Common Weakness Enumeration

    CWE Definition / CWE-615

    CWE-615: Inclusion of Sensitive Information in Source Code Comments

    The product's source code includes comments that contain sensitive information, such as filenames related to the application, old links or links that were not meant to be browsed by users, old code fragments, etc.

    Published:7 May 2007
    Organization:MITRE
    Modified:28 Oct 2026

    Related Weakness

    CWE-540: Inclusion of Sensitive Information in Source Code

    CWE-546: Suspicious Comment