logo

Database

Coveo Api Key

Description

The source code repository contains sensitive information: Coveo API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Coveo API Key patterns in source code and configuration files

Vulnerable code example

accessToken: 'xxec47fc55-21bd-40e0-93b8-8ecc38609ac0',
COVEO_API_KEY=xx245b611e-4c62-4c79-a337-69b3aad1ed82
organizationId: "acmecorp", accessToken: "xxaf0c2673-bfda-41e0-a076-f86eeffa97a1"
curl https://platform.cloud.coveo.com/rest/search/v2 -H 'Authorization: Bearer xxbfbec157-b0b3-4ec3-b4be-7313bc8a13a9'
<atomic-search-interface access-token="xx2a177212-85ed-4eab-97ff-a7992659779d">