logo

Database

Paymongo Secret Key

Description

The source code repository contains sensitive information: PayMongo Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches PayMongo Secret Key patterns in source code and configuration files

Vulnerable code example

PAYMONGO_SECRET_KEY=sk_live_D6WzNtXJle7Qph4D5Y47PP6A
PAYMONGO_SECRET_KEY="sk_test_NlUj41IJLNhsH8HZnPiCATX0"
| Secret key | sk_live_6vyisVErtpQCpLK9hkmT3zgn | Server-side |  # paymongo
const paymongo = require('paymongo')('sk_live_yyyFjmCXPO37VRtfZ6kbPbEH');
curl https://api.paymongo.com/v1/payments -u sk_live_OkuBsXxRUrb1Io9Pv5Hcd1kA:
paymongo:
  public_key: pk_live_DLqGZMmyAn4tvhJKqOC0PzNm
  secret_key: sk_live_GwnPZkAQJgjtOOrNvgOLtjCO...