logo

Database

Trello Api Token

Description

The source code repository contains sensitive information: Trello API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Trello API Token patterns in source code and configuration files

Vulnerable code example

TRELLO_API_TOKEN=ATTA9c4e1b7a3f5d2068e1c3a5b7d9f02468ace13579bdf02468ace13579bdf024680F3a9B2e
curl "https://api.trello.com/1/members/me?key=3f9a1c7e5b2d4086a1e3c5b7d9f02468&token=ATTA9c4e1b7a3f5d2068e1c3a5b7d9f02468ace13579bdf02468ace13579bdf024680F3a9B2e"
trello = TrelloClient(api_key="3f9a1c7e5b2d4086a1e3c5b7d9f02468", token="ATTA9c4e1b7a3f5d2068e1c3a5b7d9f02468ace13579bdf02468ace13579bdf024680F3a9B2e")
Authorization: OAuth oauth_consumer_key="3f9a1c7e5b2d4086a1e3c5b7d9f02468", oauth_token="ATTA9c4e1b7a3f5d2068e1c3a5b7d9f02468ace13579bdf02468ace13579bdf024680F3a9B2e"
TRELLO_API_KEY=3f9a1c7e5b2d4086a1e3c5b7d9f02468
TRELLO_API_TOKEN=ATTA9c4e1b7a3f5d2068e1c3a5b7d9f02468ace13579bdf02468ace13579bdf024680F3a9B2e
curl "https://api.trello.com/1/members/me?token=ATTA9c4e1b7a3f5d2068e1c3a5b7d9f02468ace13579bdf02468ace13579bdf024680F3a9B2e&key=3f9a1c7e5b2d4086a1e3c5b7d9f02468"