CVE-2024-33901

1976-01-0100:00:00

mitre

github.com

AI Score

6.8

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:keepassxc:keepassxc:2.7.7:*:*:*:*:*:*:*"
    ],
    "vendor": "keepassxc",
    "product": "keepassxc",
    "versions": [
      {
        "status": "affected",
        "version": "2.7.7"
      }
    ],
    "defaultStatus": "affected"
  }
]