SYM_GEN_0262 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Use of Hard-coded Credentials

Property Value
Language regex
Severity low
CWE CWE-798: Use of Hard-coded Credentials
OWASP A07:2021 - Identification and Authentication Failures
Confidence Level Low
Impact Level Medium
Likelihood Level Low

Description

Twitter access tokens have been found hard-coded in the source code. Storing sensitive credentials like API tokens directly in code can expose them to unauthorized users if the code is shared or leaked.

Impact

If attackers gain access to these tokens, they could potentially control your Twitter account, post unauthorized tweets, access private data, or abuse the account for malicious activities, leading to reputational damage and possible compliance violations.