logo

Database

Yookassa Secret Key

Description

The source code repository contains sensitive information: Yookassa Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Yookassa Secret Key patterns in source code and configuration files

Vulnerable code example

YOOKASSA_SHOP_ID=2877152
YOOKASSA_SECRET_KEY=live_qPvOIWXO7qLVGaj9jO8t9r-Oxus4qDVk0eWclpUa3is
YOOKASSA_API_KEY=live_eu1q6vUhqfzzXgN6YVJMDKC6lz53Hjq2HRDsCEZY4mM
use YooKassa\Client;

$client = new Client();
$client->setAuth('5900690', 'live_qEi0MTlpIkJE0IFwDNXcs_4SypHXcc2C1C6-nu6ccmo');
from yookassa import Configuration...