- Description
- In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
- Hype score
- Not currently trending
#3 - Sunday, Keeper and Pilgrimage from HTB Love the binwalk and magick vulnerabilities from Pilgrimage, magick exploit allow to do LFI (CVE-2022-44268) and binwalk just gives RCE (CVE-2022-4510). Vulnerability in keepass from keeper was interesting (CVE-2023-32784)
@_nullshell_
16 Dec 2025
1 Impression
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔓 CVE-2023-32784 afecta a KeePass, uno de los gestores de contraseñas más usados. 💥 Permite recuperar la contraseña maestra desde memoria, ¡sin privilegios! Solo necesita que se haya escrito manualmente. 📌 Exploits, demo y solución en @FluProject: 🔗 https://t.c
@fluproject
15 Jul 2025
39 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
A mediados de 2023 surgió la vulnerabilidad CVE-2023-32784, la cual podría causar el compromiso de la contraseña maestra si se cumplen las condiciones que os contamos en el siguiente enlace: https://t.co/YJCHRILIwi https://t.co/f3ZVFwYukE
@fluproject
24 Apr 2025
127 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Cyberis' Damian Wojcik writes about the vulnerability CVE-2023-32784. This vulnerability allows an attacker with access to the system where KeePass is running to exploit the flaw by analysing a memory dump to extract the master password to the database: https://t.co/6stPeufOWm h
@cyberisltd
31 Oct 2024
25 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:keepass:keepass:*:*:*:*:*:*:*:*",
"matchCriteriaId": "02B04F85-32CC-4B57-A6DE-2FE8BAD7A17D",
"versionEndExcluding": "2.54",
"versionStartIncluding": "2.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]