search

dmachard / python-pdnsbackup

Backup tool for PowerDNS database
MIT License
2 stars 0 forks source link

Security Bug - Exposed S3 credentials publicly available #67

Open ROBOT-X-cyber opened 3 months ago

ROBOT-X-cyber commented 3 months ago

Hi, S3 bucket credentials S3_ACCESS_KEY_ID and S3_SECRET_ACCESS_KEY are exposed in your public github repo.

https://github.com/dmachard/python-pdnsbackup/blob/main/.pdnsbackup.env

Would recommend to remove it immediately for security reasons or misuse of it by malicious actors.

Regards, Abhirup Konwar (BugHunter)

dmachard commented 2 months ago

You can address this by making a pull request to remove the exposed credentials if you wish...