logo

Database

Elastic Email Api Key

Description

The source code repository contains sensitive information: Elastic Email API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Elastic Email API Key patterns in source code and configuration files

Vulnerable code example

elastic_email:
  from: noreply@acme.com
  key: B243B5E1F21A4CF88D99CFF87B266BB59921D31D680F4FF790CC4387C9BDEAD27D2178A451724CDFA4807715A2A0FDE4
{"ElasticEmail": {"Key": "B243B5E1F21A4CF88D99CFF87B266BB59921D31D680F4FF790CC4387C9BDEAD27D2178A451724CDFA4807715A2A0FDE4"}}
ELASTIC_EMAIL_KEY=CA9BA931-6497-4114-88C8-2F4765B92F4B
ELASTIC_EMAIL_API_KEY=B243B5E1F21A4CF88D99CFF87B266BB59921D31D680F4FF790CC4387C9BDEAD27D2178A451724CDFA4807715A2A0FDE4
const elasticEmailApiKey = "63CE2BF090FC4102B6C2B790CE53E45B1FBE6298119A4272B743E5F42EC53714386B969BAE74432393437656F6DFF689";
curl -H "X-ElasticEmail-ApiKey: B75250071CFF4108BD1EE6233EFDB203521DCCB57A2743C3B40F08E4EA0AEA90AD69A033D1314583B2D3B188EC165748" https://api.elasticemail.com/v4/emails...