{"id":"CVE-2023-24055","aliases":["EUVD-2023-28119","GHSA-xf2q-qxhf-rqh5","MGASA-2023-0221"],"status":"disputed","title":"** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write...","description":"KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.03796,"percentile":0.90148,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-312"],"published":"2023-01-22T00:00:00Z","modified":"2026-06-17T05:38:34Z","exploits":[{"source":"pocgithub","id":"deetl/CVE-2023-24055","title":"deetl/CVE-2023-24055","date":"2023-01-24","url":"https://github.com/deetl/CVE-2023-24055"},{"source":"pocgithub","id":"alt3kx/CVE-2023-24055_PoC","title":"alt3kx/CVE-2023-24055_PoC","date":"2023-01-25","url":"https://github.com/alt3kx/CVE-2023-24055_PoC"},{"source":"pocgithub","id":"Cyb3rtus/keepass_CVE-2023-24055_yara_rule","title":"Cyb3rtus/keepass_CVE-2023-24055_yara_rule","date":"2023-01-29","url":"https://github.com/Cyb3rtus/keepass_CVE-2023-24055_yara_rule"},{"source":"pocgithub","id":"julesbozouklian/PoC_CVE-2023-24055","title":"julesbozouklian/PoC_CVE-2023-24055","date":"2023-01-30","url":"https://github.com/julesbozouklian/PoC_CVE-2023-24055"},{"source":"pocgithub","id":"digital-dev/KeePass-TriggerLess","title":"digital-dev/KeePass-TriggerLess","date":"2023-02-09","url":"https://github.com/digital-dev/KeePass-TriggerLess"},{"source":"pocgithub","id":"zwlsix/KeePass-CVE-2023-24055","title":"zwlsix/KeePass-CVE-2023-24055","date":"2023-02-14","url":"https://github.com/zwlsix/KeePass-CVE-2023-24055"},{"source":"pocgithub","id":"yosef0x01/CVE-2023-24055","title":"yosef0x01/CVE-2023-24055","date":"2023-02-25","url":"https://github.com/yosef0x01/CVE-2023-24055"}],"affected":[{"source":"osv","ecosystem":"Mageia:8","package":"keepass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54-1.mga8"}]}],"bundled":2}],"products":[{"vendor":"keepass","product":"keepass"}],"references":[{"url":"https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/","tags":["x_transferred","Patch","Third Party Advisory"]},{"url":"https://sourceforge.net/p/keepass/feature-requests/2773/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24055"},{"url":"https://securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw"},{"url":"https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b"},{"url":"https://sourceforge.net/p/keepass/feature-requests/2773"},{"url":"https://github.com/advisories/GHSA-xf2q-qxhf-rqh5"},{"url":"https://advisories.mageia.org/MGASA-2023-0221.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31935","tags":["report"]},{"url":"https://amp.thehackernews.com/thn/2023/05/keepass-exploit-allows-attackers-to.html","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-24055","description":"KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.","status":"disputed","published":"2023-01-22T00:00:00Z","modified":"2024-08-02T10:49:08.94Z","updated_at":"2026-11-02T14:35:27.006218Z"}],"euvd":[{"id":"EUVD-2023-28119","description":"KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.","status":"published","published":"2023-01-22T00:00:00Z","modified":"2024-08-02T10:49:08Z","updated_at":"2026-11-03T03:50:07.32318Z"}],"ghsa":[{"id":"GHSA-xf2q-qxhf-rqh5","title":"** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write...","description":"** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.","status":"published","published":"2023-01-22T06:30:27Z","modified":"2024-03-30T05:01:47Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:55:45.190481Z"}],"nvd":[{"id":"CVE-2023-24055","description":"KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.","status":"disputed","published":"2023-01-22T04:15:11.56Z","modified":"2026-06-17T05:38:34.157Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:07:46.064662Z"}],"osv":[{"id":"MGASA-2023-0221","title":"Updated keepass packages fix security vulnerability","description":"Allows an attacker, who has write access to the XML configuration file, to\nobtain the cleartext passwords by adding an export trigger. Disputed by\nvendor due to level of access required. (CVE-2023-24055)\nPossible to recover the cleartext master password from a memory dump, even\nwhen a workspace is locked or no longer running (CVE-2023-32784)\n","status":"published","published":"2023-07-07T05:54:45Z","modified":"2026-04-16T04:43:28.557993087Z","updated_at":"2026-11-02T15:49:42.263076Z"}]}}