VDB

GCVE-110-MAGEIA-2023-221

GCVE-110-MAGEIA-2023-221
Advisory Published
Vulnetix · Advisory published July 7, 2023
Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. (CVE-2023-24055) Possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running (CVE-2023-32784)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiakeepass0 (affected), 2.54-1.mga8 (unaffected)—

Aliases

CVE-2023-24055CVE-2023-32784

References

Updated keepass packages fix security vulnerability
advisory
Updated keepass packages fix security vulnerability
issue
Updated keepass packages fix security vulnerability
issue

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›