Liberapay · Report #361089

twitter api access token leaked on github

N/Astatus

4upvotes

2 Jun 2018disclosed

How it was found

sensitive token were leaked on GitHub page of liberapay . also mixpanel token was leaked TWITTER_CONSUMER_KEY=QBB9vEhxO4DFiieRF68zTA TWITTER_CONSUMER_SECRET=mUymh1hVMiQdMQbduQFYRi79EYYVeOZGrhj27H59H78 +TWITTER_ACCESS_KEY=34175404-G6W8Hh19GWuUhIMEXK0LyZsy7N9aCMcy1bYJ9rI +TWITTER_ACCESS_SECRET=K6wxV1OCsihZAkEPkWtoLYDiRJnWajBBWn4UgliTRQ TWITTER_CALLBACK=http://127.0.0.1:8537/on/twitter/associate MIXPANEL_TOKEN=cb9dec68ac0ee57071f0be39f164a417

Impact

a attacker with your credentials can have severe impact

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original