CVE-2018-1000835: Keepassdx Keepass Dx

Critical severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days.

KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

Affected products

• Keepassdx Keepass Dx: version 2.5.0.0 only

Published 2018-12-20. Last modified 2026-06-17.