CVE-2018-1000835

2022-10-0316:21:59

mitre

www.cve.org

keepassdx version

xml external entity (xxe)

vulnerability

kdbx file parser

disclosure of confidential data

denial of service

ssrf

port scanning

cve-2018-1000835

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

References

0dd.zone/2018/10/28/KeePassDX-XXE/

github.com/Kunzisoft/KeePassDX/issues/200