Summary by madhu873
Found a Google Maps API key in the homepage source, usable for Geocoding API calls without restrictions. This could lead to unexpected billing, quota exhaustion, or abuse. Confirmed with a single safe request.
Public Google Maps API key on www.globe.gov allows Geocoding API calls (billable use)
Disclosed by madhu873- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date about 2 months ago
- Priority P5 Bugcrowd's VRT priority rating
- Status Informational This vulnerability is seen as an accepted business risk