CVE-2018-1000835

2018-12-2015:29:01

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

CPENameOperatorVersion
keepassdxeq2.5.0.0beta1

CPE	Name	Operator	Version
	keepassdx	eq	2.5.0.0beta1

References

0dd.zone/2018/10/28/KeePassDX-XXE/

github.com/Kunzisoft/KeePassDX/issues/200