SYM_GEN_0290 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Use of Hard-coded Credentials

Property Value
Language regex
Severity low
CWE CWE-798: Use of Hard-coded Credentials
OWASP A07:2021 - Identification and Authentication Failures
Confidence Level Low
Impact Level Medium
Likelihood Level Low

Description

A Discord client ID was found hard-coded in the source code. Storing credentials or sensitive identifiers directly in code increases the risk of accidental exposure and unauthorized access.

Impact

If this information is leaked, attackers could use it to impersonate your application or target your Discord integration. This could lead to abuse of your Discord bot or service, data leaks, or further compromise of your application's security.