Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Medium |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
A Stripe Restricted API Key has been found hard-coded in the codebase. Storing sensitive API keys directly in code can expose them to unauthorized users if the code is leaked or shared.
Impact#
If an attacker obtains this API key, they may be able to access or interact with your Stripe account in ways permitted by the key’s restrictions, potentially leading to unauthorized transactions, data exposure, or abuse of payment services. This can result in financial loss and compromise of sensitive business operations.