HexBrain

Reddit · Report #1762927

api keys leaked

Informativestatus
mediumseverity
16upvotes
10 Nov 2022disclosed

How it was found

Summary:

[Disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication. Verify whether any keys disclosed are actually valid, and whether their disclosure within the application is appropriate]

Impact:

[Disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication. Verify whether any keys disclosed are actually valid, and whether their disclosure within the application is appropriate]

Steps To Reproduce:

[add details for how we can reproduce the issue]

  1. open the url redditinc.com
  2. copy the "redditinc" from url
  3. using gitdork ("redditinc" apikey) 4.open github search the gitdork 5.check the results

Supporting Material/References:

[list any additional material (e.g. screenshots, logs, etc.)]

  • [attachment / reference]

Impact

Disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication. Verify whether any keys disclosed are actually valid, and whether their disclosure within the application is appropriate

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original