logo

Database

Buttercms Api Token

Description

The source code repository contains sensitive information: ButterCMS API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches ButterCMS API Token patterns in source code and configuration files

Vulnerable code example

curl -X POST https://api.buttercms.com/v2/posts/ \
  -H "Authorization: Token 7c4e1a9b3d5f2068e4a1c7b9d3f5e2a8c0b6d4f1" \
  -H "Content-Type: application/json"
BUTTER_CMS_API_KEY=7c4e1a9b3d5f2068e4a1c7b9d3f5e2a8c0b6d4f1
window.__RUNTIME_CONFIG__ = { BUTTER_CMS_API_KEY: "7c4e1a9b3d5f2068e4a1c7b9d3f5e2a8c0b6d4f1", FARO_URL: "https://faro.example.com/collect" };
buttercms_token: '7c4e1a9b3d5f2068e4a1c7b9d3f5e2a8c0b6d4f1'
const config = { butterCmsKey: "7c4e1a9b3d5f2068e4a1c7b9d3f5e2a8c0b6d4f1" };
{"buttercms_api_key": "7c4e1a9b3d5f2068e4a1c7b9d3f5e2a8c0b6d4f1"}...