Reddit · Report #1762927
api keys leaked
How it was found
Summary:
[Disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication. Verify whether any keys disclosed are actually valid, and whether their disclosure within the application is appropriate]
Impact:
[Disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication. Verify whether any keys disclosed are actually valid, and whether their disclosure within the application is appropriate]
Steps To Reproduce:
[add details for how we can reproduce the issue]
- open the url redditinc.com
- copy the "redditinc" from url
- using gitdork ("redditinc" apikey) 4.open github search the gitdork 5.check the results
Supporting Material/References:
[list any additional material (e.g. screenshots, logs, etc.)]
- [attachment / reference]
Impact
Disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication. Verify whether any keys disclosed are actually valid, and whether their disclosure within the application is appropriate