Approved changes feed: RSS · Atom

cpe:2.3:a:keepassxc:keepassxc-browser:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKeepassxc (4e825203-335b-5307-b657-207fae620fed)
ProductKeepassxc Browser (c0625104-0229-5dfe-9b31-a761f1a355fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/keepassxreboot/keepassxc-browser purl2cpe 2026-06-01 10:15:24.917445

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-65203 vulnerable 2026-06-08 07:39:20.769713 Details available
KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials.
Published: 2025-12-17T00:00:00.000Z
Updated: 2025-12-17T18:26:32.163Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.