Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
Dropbox API tokens have been found hard-coded in the source code. Storing credentials directly in code exposes them to anyone with access to the repository, increasing the risk of unauthorized access.
Impact#
If attackers obtain these hard-coded tokens, they could access or manipulate your Dropbox data, potentially leading to data leaks, loss, or unauthorized changes. This could compromise sensitive information and damage your organization’s reputation.