Paragon Initiative Enterprises · Report #1416665

Recaptcha Secret key Leaked

Informativestatus

highseverity

9upvotes

4 Dec 2021disclosed

How it was found

Greeting from @kashifinfo90,

I hope Paragonie Security Team is doing great, Following Secret Keys are leaked:

"secret-key": "6Ldy5BYTAAAAAPBh868BMm2nGZelOUyXJHTUE4no", "site-key": "6Ldy5BYTAAAAACk3Tj8wDUBLcVxSL2JXFBw-Dtj3" "secret-key": "6Ld27iETAAAAAF6tsd5SaoCgc5cFX-tkfHqx7FtX", "site-key": "6Ld27iETAAAAAI51EVcu0nBw2wkxQiZxg1zGv2uI"

Steps To Reproduce:

To find the leak please Click Here

Impact

To avoid any legal issue i didn't try anything with these key, hence it up to you to fully investigate them and figure out if they have any security impact. Note: If it is out of scope or your figure out that the security impact is un considerable please allow me to selfclose it, It will prevent decrease in my current reputation points.

kind Regards, @kashifinfo90.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original