logo

Database

Monday Api Token

Description

The source code repository contains sensitive information: Monday API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Monday API Token patterns in source code and configuration files

Vulnerable code example

MONDAY_API_TOKEN=eyJhbGciOiJIUzI1NiJ9.eyJ0aWQiOjUxMjM0NTY3OCwiYWFpIjoxMSwidWlkIjo0MDEyMzQ1NiwiaWFkIjoiMjAyNi0wMS0xNVQxMDoyMDozMC4wMDBaIiwicGVyIjoibWU6d3JpdGUiLCJhY3RpZCI6MTc2NTQzMjEsInJnbiI6InVzZTEifQ.Z_B1M1zzyBG0EakYoJJUSDMCQP3UE-hKXatJEp5bl8U
curl -X POST https://api.monday.com/v2 -H "Authorization: eyJhbGciOiJIUzI1NiJ9.eyJ0aWQiOjUxMjM0NTY3OCwiYWFpIjoxMSwidWlkIjo0MDEyMzQ1NiwiaWFkIjoiMjAyNi0wMS0xNVQxMDoyMDozMC4wMDBaIiwicGVyIjoibWU6d3JpdGUiLCJhY3RpZCI6MTc2NTQzMjEsInJnbiI6InVzZTEifQ.Z_B1M1zzyBG0EakYoJJUSDMCQP3UE-hKXatJEp5bl8U"
monday.setToken("eyJhbGciOiJIUzI1NiJ9.eyJ0aWQiOjUxMjM0NTY3OCwiYWFpIjoxMSwidWlkIjo0MDEyMzQ1NiwiaWFkIjoiMjAyNi0wMS0xNVQxMDoyMDozMC4wMDBaIiwicGVyIjoibWU6d3JpdGUiLCJhY3RpZCI6MTc2NTQzMjEsInJnbiI6InVzZTEifQ.Z_B1M1zzyBG0EakYoJJUSDMCQP3UE-hKXatJEp5bl8U")
const client = new ApiClient({ token: "eyJhbGciOiJIUzI1NiJ9.eyJ0aWQiOjUxMjM0NTY3OCwiYWFpIjoxMSwidWlkIjo0MDEyMzQ1NiwiaWFkIjoiMjAyNi0wMS0xNVQxMDoyMDozMC4wMDBaIiwicGVyIjoibWU6d3JpdGUiLCJhY3RpZCI6MTc2NTQzMjEsInJnbiI6InVzZTEifQ.Z_B1M1zzyBG0EakYoJJUSDMCQP3UE-hKXatJEp5bl8U" })
token=eyJhbGciOiJIUzI1NiJ9.eyJ0aWQiOjUxMjM0NTY3OCwiYWFpIjoxMSwidWlkIjo0MDEyMzQ1NiwiaWFkIjoiMjAyNi0wMS0xNVQxMDoyMDozMC4wMDBaIiwicGVyIjoibWU6d3JpdGUiLCJhY3RpZCI6MTc2NTQzMjEsInJnbiI6InVzZTEifQ.Z_B1M1zzyBG0EakYoJJUSDMCQP3UE-hKXatJEp5bl8U
API_TOKEN='eyJhbGciOiJIUzI1NiJ9.eyJ0aWQiOjUxMjM0NTY3OCwiYWFpIjoxMSwidWlkIjo0MDEyMzQ1NiwiaWFkIjoiMjAyNi0wMS0xNVQxMDoyMDozMC4wMDBaIiwicGVyIjoibWU6d3JpdGUiLCJhY3RpZCI6MTc2NTQzMjEsInJnbiI6InVzZTEifQ.Z_B1M1zzyBG0EakYoJJUSDMCQP3UE-hKXatJEp5bl8U'