Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/12/18 12:36 a.m.•25 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS6.8AI score0.00137EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/17 6:15 p.m.•18 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS0.00137EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/17 12:00 a.m.•13 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS6.5AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•21 views

KeePassXC-Browser 安全漏洞

KeePassXC-Browser is an open source browser extension for KeePassXC. A security vulnerability exists in KeePassXC-Browser version 1.9.9.2 and earlier, which stems from auto-populating credentials in a sandboxed document, which could lead to credential disclosure...

7.1CVSS6.6AI score0.00137EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/17 12:00 a.m.•8 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

6.4AI score0.00137EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/17 12:00 a.m.•26 views

CVE-2025-65203

The KeePassXC-Browser extension (versions through 1.9.9.2 ) is vulnerable to credential theft because it autofills or prompts users to fill stored credentials into documents rendered under a browser-enforced Content Security Policy (CSP) directive and iframe attribute sandbox . This behavior allo...

6.4AI score0.00137EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•2 views

CVE-2025-65203: Cross-Site Request Forgery (CSRF)

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS5.8AI score0.00137EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/17 12:00 a.m.•52 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

0.00137EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/17 12:00 a.m.•23 views

PT-2025-51850

Name of the Vulnerable Software and Affected Versions KeePassXC-Browser versions through 1.9.9.2 Description The software autofills or prompts users to fill stored credentials into documents rendered under a browser-enforced Content Security Policy CSP directive and iframe attribute sandbox. This...

7.1CVSS6.5AI score0.00137EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2025/12/17 12:00 a.m.•27 views

CVE-2025-65203

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...

7.1CVSS6.8AI score0.00137EPSS
SaveExploits0References2
Rows per page
Query Builder