SYM_GEN_0195 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Use of Hard-coded Credentials
Property | Value |
---|---|
Language | regex |
Severity | |
CWE | CWE-798: Use of Hard-coded Credentials |
OWASP | A07:2021 - Identification and Authentication Failures |
Confidence Level | Low |
Impact Level | Medium |
Likelihood Level | Low |
Description
A Discord API token has been found hard-coded in the source code. Storing credentials directly in code exposes them to anyone with access to the repository, including accidental leaks through version control.
Impact
If attackers obtain the Discord API token, they could gain unauthorized access to your Discord bot or user account, send malicious messages, steal sensitive data, or impersonate your service, potentially leading to data breaches or abuse of your Discord resources.