Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
A Flickr access token has been found hard-coded in the source code. Storing credentials directly in code makes them easy to accidentally expose and accessible to anyone with code access.
Impact#
If an attacker obtains this token, they could gain unauthorized access to your Flickr account, potentially stealing sensitive data, posting content, or abusing the account. This can lead to data breaches, compromised user privacy, and reputational or financial damage to your organization.