PT-2018-9559

CVE-2018-1000835

·

Published

2018-12-20

·

Updated

2019-09-12

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions KeePassDX versions prior to 2.5.0.0beta18
Description The issue concerns a XML External Entity (XXE) vulnerability in the kdbx file parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.
Recommendations For versions prior to 2.5.0.0beta18, update to a version newer than 2.5.0.0beta17 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-611: Improper Restriction of XML External Entity Reference
Related identifiers
CVE-2018-1000835
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com