Weblate · Report #926093
Secret_key in GitHub
Informativestatus
6upvotes
18 Jul 2020disclosed
How it was found
hello I have found secret_key in GitHub is public and noticed something this key have comment # Make this unique, and don't share it with anybody. and it's public in GitHub also I noticed this file has coding to do the payment.db I think information like this must be private
SECRET_KEY = "qov6(cp%)bot+8c%#4@4or(t@_$y5#d8k9u1^+pknz%lms0x" Link : https://github.com/WeblateOrg/website/blob/bc65d95a80d90ed95a8e59d0fa5dc14d7c060b3a/weblate_web/settings.py
Impact
i don't know what attacker can do but i know this info must be private