CVE-2018-1000835

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-1000835
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1000835.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-1000835
Published
2018-12-20T15:29:01Z
Modified
2025-01-08T04:51:20.149447Z
Severity
  • 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

References

Affected packages

Git / github.com/kunzisoft/keepassdx

Affected ranges

Type
GIT
Repo
https://github.com/kunzisoft/keepassdx
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0fdcc29aa2aa10233e194979be3215fd511c6b1b
Last affected
1033dd78b080de8007da545e648a8174f4a00f1b
Last affected
161923c80817379a865a1ae5f8b6441105440e8d
Last affected
2cc530cbece7abcfb265d06161fad8a996e90fea
Last affected
38c264e38d2ef1bac9b3e3856ea3b46c8929b6d9
Last affected
49ea92a4a501f1c35275b517b3c5288e16e48470
Last affected
4f9625a3e19147e8f1d365a00faf14d7cb12c189
Last affected
57f71afb98be5b90699ae1d57b3f7777f1763430
Last affected
64a4f439457bba5717be6c9b20f6f5c02a7ebd26
Last affected
6fddc92ce7fce72ab051f56c6fe35f3c7a555959
Last affected
943d7ca6b9e66275647a43f1d2359544b1e8414e
Last affected
b62106068b9c08f524ed5f50ac406aaabc058e6a
Last affected
b8b106eb65bb447d8ef8d646eb8a332f3c05f6f1
Last affected
c24c18d89e9fb61a017f3706d00c2acfd4228e3b
Last affected
d4a0b59eb1978e4baf91d0e6d84c45a781ab1832
Last affected
e7bbb47422d73bff573919f3ed4d9c269dc5e918
Last affected
edc7324c1dab0eb9cdfa2043629d723cbf7c4c21

Affected versions

2.*

2.5.0.0beta1
2.5.0.0beta10
2.5.0.0beta2
2.5.0.0beta3
2.5.0.0beta4
2.5.0.0beta5
2.5.0.0beta6
2.5.0.0beta7
2.5.0.0beta8
2.5.0.0beta9