logo

Database

Trello Legacy Api Token

Description

The source code repository contains sensitive information: Trello Legacy API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Trello Legacy API Token patterns in source code and configuration files

Vulnerable code example

TRELLO_API_TOKEN=7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8
export TRELLO_TOKEN="7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8"
trelloToken: '7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8'
requests.get(f"https://api.trello.com/1/boards/{board_id}?key=3f9a1c7e5b2d4086a1e3c5b7d9f02468&token=7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8")
Authorization: OAuth oauth_consumer_key="3f9a1c7e5b2d4086a1e3c5b7d9f02468", oauth_token="7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8"
{"key": "3f9a1c7e5b2d4086a1e3c5b7d9f02468", "token": "7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8"}
client = TrelloClient(api_key="3f9a1c7e5b2d4086a1e3c5b7d9f02468", token="7e3f9a1c5b2d40866ad8c4e2f1b3a5978ce0d2f4a6b8c1e3f5a7b9d0c2e4f6a8")
client = TrelloClient(...