CVE-2023-36817

`tktchurch/website` contains the codebase for The King's Temple Church website. In version 0.1.0, a Stripe API key was found in the public code repository of the church's project. This sensitive information was unintentionally committed and subsequently exposed in the codebase. If an unauthorized party gains access to this key, they could potentially carry out transactions on behalf of the organization, leading to financial losses. Additionally, they could access sensitive customer information, leading to privacy violations and potential legal implications. The affected component is the codebase of our project, specifically the file(s) where the Stripe API key is embedded. The key should have been stored securely, and not committed to the codebase. The maintainers plan to revoke the leaked Stripe API key immediately, generate a new one, and not commit the key to the codebase.

• CWE-200
• CWE-798

• https://github.com/tktchurch/website/security/advisories/GHSA-x3m6-5hmf-5x3wMitigation, Third Party Advisory
• https://github.com/tktchurch/website/security/advisories/GHSA-x3m6-5hmf-5x3wMitigation, Third Party Advisory

Published

Jul 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36811borgbackup is an opensource, deduplicating archiver with com…4.7
• CVE-2023-36812OpenTSDB is a open source, distributed, scalable Time Series…9.8
• CVE-2023-36813Kanboard is project management software that focuses on the …8.8
• CVE-2023-36814Products.CMFCore are the key framework services for the Zope…7.5
• CVE-2023-36815Sealos is a Cloud Operating System designed for managing clo…8.1
• CVE-2023-368162FA is a Web app to manage Two-Factor Authentication (2FA) a…6.1
• CVE-2023-36818Discourse is an open source discussion platform. In affected…7.5
• CVE-2023-36819Knowage is the professional open source suite for modern bus…6.5
• CVE-2023-3682A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-36820Micronaut Security is a security solution for applications. …6.5
• CVE-2023-36821Uptime Kuma, a self-hosted monitoring tool, allows an authen…8.8
• CVE-2023-36822Uptime Kuma, a self-hosted monitoring tool, has a path trave…8.1