Use of Hard-coded Credentials

Property
Language	regex
Severity
CWE	CWE-798: Use of Hard-coded Credentials
OWASP	A07:2021 - Identification and Authentication Failures
Confidence Level	Low
Impact Level	Medium
Likelihood Level	Low

Description#

Sensitive Flutterwave secret keys have been found hard-coded in the source code. Storing credentials directly in code makes them easy to leak and exposes them to anyone with code access.

Impact#

If attackers obtain these secret keys, they could access or manipulate your Flutterwave payment services, potentially leading to fraudulent transactions, data breaches, or financial losses for your organization.