id: cloudinary-basic-auth

info:
  name: Cloudinary Basic Authorization - Detect
  author: gaurang
  severity: high
  description: Cloudinary basic authorization token was detected.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cwe-id: CWE-200
  tags: keys,file,token,cloudinary
file:
  - extensions:
      - all

    extractors:
      - type: regex
        regex:
          - "cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+"

# Enhanced by md on 2023/05/04
# digest: 490a0046304402201744d25857ea77e5daf43a26dc6f905aeb2b0a623b26aa428c90aa67ff84b3c502205bc4dd714202f82f1cbd9ad2b1b5d7d9d97213f83918afc43b060b4970e5f493:922c64590222798bb761d5b6d8e72950