CVE-2023-24055
** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write...
CVE-2023-24055 is a medium vulnerability (CVSS 5.5) in Keepass, published January 22, 2023. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.80%, the 90th percentile.
- Severity
- 5.5 MediumCVSS 3.1, NVD
- Exploit chance
- 3.80%EPSS, 90th percentile
- Exploitation
- None known7 public exploits
- Fixed in
- No fix listedNo source names one
Description
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
keepassMageia:8 From an advisory covering 2 CVEs | before 2.54-1.mga8 | 2.54-1.mga8 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | deetl/CVE-2023-24055 | 2023-01-24 |
| PoC in GitHub | alt3kx/CVE-2023-24055_PoC | 2023-01-25 |
| PoC in GitHub | Cyb3rtus/keepass_CVE-2023-24055_yara_rule | 2023-01-29 |
| PoC in GitHub | julesbozouklian/PoC_CVE-2023-24055 | 2023-01-30 |
| PoC in GitHub | digital-dev/KeePass-TriggerLess | 2023-02-09 |
| PoC in GitHub | zwlsix/KeePass-CVE-2023-24055 | 2023-02-14 |
| PoC in GitHub | yosef0x01/CVE-2023-24055 | 2023-02-25 |
What each source reports
NVD Score used
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
- Record
CVE-2023-24055- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-312
- Updated
- 2026-11-02
CVE ListNo score
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
- Record
CVE-2023-24055- Updated
- 2026-11-02
EUVDEUVD-2023-28119No score
KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
- Record
EUVD-2023-28119- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xf2q-qxhf-rqh5
** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write...
** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
- Record
GHSA-xf2q-qxhf-rqh5- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-312
- Updated
- 2026-11-02
OSVMGASA-2023-0221No score
Updated keepass packages fix security vulnerability
Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. (CVE-2023-24055) Possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running (CVE-2023-32784)
- Record
MGASA-2023-0221- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b
securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw
nvd.nist.gov/vuln/detail/CVE-2023-24055
github.com/advisories/GHSA-xf2q-qxhf-rqh5
advisories.mageia.org/MGASA-2023-0221.html
bugs.mageia.org/show_bug.cgi?id=31935
amp.thehackernews.com/thn/2023/05/keepass-exploit-allows-attackers-to.html