Use of Hard-coded Credentials
| Property | |
|---|---|
| Language | regex |
| Severity |  |
| CWE | CWE-798: Use of Hard-coded Credentials |
| OWASP | A07:2021 - Identification and Authentication Failures |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
A Frame.io API token has been found hard-coded in the source code. Storing credentials directly in code exposes them to anyone with code access, increasing the risk of unauthorized use.
Impact#
If this token is leaked, attackers could gain access to your Frame.io account, potentially viewing, modifying, or deleting sensitive media and project data. This can lead to data breaches, service disruptions, and reputational harm to your organization.