Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity | |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
A RapidAPI access token has been found hard-coded in the source code. Storing credentials directly in code makes them easy to accidentally expose, especially if the code is shared or made public.
Impact#
If attackers gain access to this token, they could use your RapidAPI account to make unauthorized API calls, potentially consuming quota, incurring costs, or accessing sensitive data. This could lead to data breaches, service abuse, or financial loss for your organization.