SYM_GEN_0195 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Use of Hard-coded Credentials

Property Value
Language regex
Severity low
CWE CWE-798: Use of Hard-coded Credentials
OWASP A07:2021 - Identification and Authentication Failures
Confidence Level Low
Impact Level Medium
Likelihood Level Low

Description

A Discord API token has been found hard-coded in the source code. Storing credentials directly in code exposes them to anyone with access to the repository, including accidental leaks through version control.

Impact

If attackers obtain the Discord API token, they could gain unauthorized access to your Discord bot or user account, send malicious messages, steal sensitive data, or impersonate your service, potentially leading to data breaches or abuse of your Discord resources.