Vulnerabilidades do Keepassxc Keepassxc-browser
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Keepassxc Keepassxc-browser: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:keepassxc:keepassxc-browser
CVE-2025-65203
Alta · 7.1
CWE-352 17/12/2025
Cross-Site Request Forgery (CSRF) em Keepassxc Keepassxc-browser
KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials.