CVE-2020-37178mediumCWE-94

CVE-2020-37178: medium-severity vulnerability in KeePass Password Safe

KeePass 2.44 - Denial of Service (PoC)

Published · Updated

Follow this CVE+ Monitor KeePass Password Safe

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.6epss 0.3%
KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
Keepass · KeePass Password Safe