Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
Twitter access tokens have been found hard-coded in the source code. Storing sensitive credentials like API tokens directly in code can expose them to unauthorized users if the code is shared or leaked.
Impact#
If attackers gain access to these tokens, they could potentially control your Twitter account, post unauthorized tweets, access private data, or abuse the account for malicious activities, leading to reputational damage and possible compliance violations.