logo

Database

Upstash Redis Connection String

Description

The source code repository contains sensitive information: Upstash Redis Connection String

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Upstash Redis Connection String patterns in source code and configuration files

Vulnerable code example

REDIS_URL=rediss://default:AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5@us1-merry-cat-32748.upstash.io:6379
const client = new Redis("rediss://:9f3c1a7e5b2d4c8a0e6f1b3d5a7c9e2f@usw1-selected-termite-30690.upstash.io:30690");
redis_url = "rediss://default:gQAAAAAAAeJAAAIgcDI3YzFlOWE0ZjJiOGQ2ZTBhM2M1ZjdiOWQxZTJhNGM2Zg@stable-gnu-123456.upstash.io:6379"
broker_url = "rediss://default:AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5@us1-merry-cat-32748.upstash.io?ssl_cert_reqs=none"