CVE-2023-36817

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-36817

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36817.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-36817

Aliases

GHSA-x3m6-5hmf-5x3w

Published

2023-07-03T17:54:35.894Z

Modified

2026-03-14T12:08:04.978906Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

The King's Temple Church website Leaked Stripe API Key in Public Code Repository

Details

tktchurch/website contains the codebase for The King's Temple Church website. In version 0.1.0, a Stripe API key was found in the public code repository of the church's project. This sensitive information was unintentionally committed and subsequently exposed in the codebase. If an unauthorized party gains access to this key, they could potentially carry out transactions on behalf of the organization, leading to financial losses. Additionally, they could access sensitive customer information, leading to privacy violations and potential legal implications. The affected component is the codebase of our project, specifically the file(s) where the Stripe API key is embedded. The key should have been stored securely, and not committed to the codebase. The maintainers plan to revoke the leaked Stripe API key immediately, generate a new one, and not commit the key to the codebase.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-200",
        "CWE-798"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36817.json"
}

References

Affected packages

Git / github.com/tktchurch/website

Affected ranges

Type

GIT

Repo

https://github.com/tktchurch/website

Events

Introduced

Last affected

f9c3ce7b7a888940dbbf958c7b15e6e0460f45cb

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "= 0.1.0"
        }
    ]
}

Affected versions

0.*

0.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36817.json"