software composition analysis
Product
SAST
Catch vulnerabilities as you develop DAST
Test live web applications like an attacker SCA
Secure open-source and supply chain MAST
Secure mobile apps from code to store Compliance
Align with standards while shipping secure code
Resources
Vulnerability database Healthy Package
Blog News
Documentation
Pricing Partners About Us Log In
software composition analysis

JavaScript : Web3: Hardcoded sensitive data

Classification

OWASP Top 10 2021 A4-Insecure Design CWE CWE-257 CWE-522 CWE-798 CWE/SANS Top 25 2011 CWE-798 CWE/SANS Top 25 2021 CWE-522 CWE-798

Overview

Web3 library is probably used.

Sensitive data is hardcoded in the source code.

References

  1. The best way to store secrets in your app is not to store secrets in your app - poka-techblog
  2. Web3js documentation
  3. CWE-798: Use of Hard-coded Credentials

See also

JavaScript : Weak encryption algorithm
JavaScript : ECB encryption mode
JavaScript : Weak hashing algorithm