Property
Languageregex
Severitylow
CWECWE-798: Use of Hard-coded Credentials
OWASPA07:2021 - Identification and Authentication Failures
Confidence LevelLow
Impact LevelMedium
Likelihood LevelLow

Description#

A Discord API token has been found hard-coded in the source code. Storing credentials directly in code exposes them to anyone with access to the repository, including accidental leaks through version control.

Impact#

If attackers obtain the Discord API token, they could gain unauthorized access to your Discord bot or user account, send malicious messages, steal sensitive data, or impersonate your service, potentially leading to data breaches or abuse of your Discord resources.