54 lines
1.3 KiB
Plaintext
54 lines
1.3 KiB
Plaintext
|
include::../../../shared_content/secrets/description.adoc[]
|
||
|
|
|
||
|
|
== Why is this an issue?
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/rationale.adoc[]
|
||
|
|
|
||
|
|
=== What is the potential impact?
|
||
|
|
|
||
|
|
Mailgun API keys have complete control over the Mailgun account and allow
|
||
|
|
sending bulk emails.
|
||
|
|
|
||
|
|
Below are some real-world scenarios that illustrate some impacts of an attacker
|
||
|
|
exploiting the secret.
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/personal_data_compromise.adoc[]
|
||
|
|
|
||
|
|
:secret_type: secret
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/phishing.adoc[]
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/malware_distribution.adoc[]
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/suspicious_activities_termination.adoc[]
|
||
|
|
|
||
|
|
== How to fix it
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/revoke.adoc[]
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/vault.adoc[]
|
||
|
|
|
||
|
|
=== Code examples
|
||
|
|
|
||
|
|
:example_secret: key-5kl947611d0oagfbij4n23h3c58g2efm
|
||
|
|
:example_name: mailgun_key
|
||
|
|
:example_env: MAILGUN_KEY
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/examples.adoc[]
|
||
|
|
|
||
|
|
//=== How does this work?
|
||
|
|
|
||
|
|
//=== Pitfalls
|
||
|
|
|
||
|
|
//=== Going the extra mile
|
||
|
|
|
||
|
|
== Resources
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/resources/standards.adoc[]
|
||
|
|
|
||
|
|
=== Documentation
|
||
|
|
|
||
|
|
* SendGrid Documentation - https://docs.sendgrid.com/ui/account-and-settings/api-keys[API Keys]
|
||
|
|
|
||
|
|
//=== Benchmarks
|