HexBrain

Planet Labs · Report #1639011

Api data leak

Validstatus
mediumseverity
58upvotes
20 Nov 2024disclosed

Summary

A security vulnerability has been identified where sensitive API keys are exposed through archived data accessible via the Wayback Machine (web.archive.org). Some of these API keys are found to be valid and could potentially be exploited by malicious actors. The exposure occurs through historical snapshots of Planet's API endpoints that were cached by the Internet Archive's crawling service.

Steps To Reproduce:

Impact It can be used to offend

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original