Unscored CVE-2018-1000835 EUVD-2018-2027GHSA-9qcx-vmqv-xpff

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of …

Published Dec 20, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

References

https://github.com/Kunzisoft/KeePassDX/issues/200
https://0dd.zone/2018/10/28/KeePassDX-XXE/