DerScanner
Home / Vulnerability Database / Go : Web3: Hardcoded Infura API key
Go

Go : Web3: Hardcoded Infura API key

Classification

OWASP Top 10 2021
A4-Insecure Design
CWE
CWE-257CWE-522CWE-798
CWE/SANS Top 25 2011
CWE-798
CWE/SANS Top 25 2021
CWE-522CWE-798

Overview

Web3 library is probably used.

Infura API key is hardcoded in the source code.

References

  1. CWE-798: Use of Hard-coded Credentials
  2. GoDoc
CRITICAL

DerScanner Severity Score

Do you want to fix Go : Web3: Hardcoded Infura API key in your application?

See also

Go

Go : Undocumented feature: special account

Go

Go : Nil salt

Go

Go : Logging into system output