CVE-2023-24055

CVE-2023-24055 affects KeePass through version 2.53, allowing an attacker with write access to the XML configuration file to extract cleartext passwords by adding an export trigger. This vulnerability is rated Medium severity (CVSS 5.5), requiring local access and user interaction (UI:R) to achieve high confidentiality impact. While the vendor disputes it as a security flaw given the prerequisite access, the vulnerability has garnered significant community discussion and media coverage, including reports of it being targeted by info-stealing malware like ViperSoftX. There are no public exploit modules or KEV entries, but its high EPSS and FAUCET Risk Score indicate a notable potential for exploitation.