Thank you...awsome work Dominik Best regards, Jeff
It affect only KeePassDX (a Android version) or also KeePass in general ?
Sorry it seem it affect only KeePassDX (a Android version)
Did this vulnerability affect all the version and are you working on a patch for the 2.50 Beta version ? CVE-2018-1000835: KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning
Yeah its probably what we will do go with Pleasant solution (wich offer his own KeePass client). What is cool with KeePass is if i want i can develop a version wich match my requirements. But anyway KeePass is the best...so many interesting features Thank you guys
Yeah its probably what we will do go with Pleasant solution (wich offer a his own KeePass client). What is cool with KeePass is if i want i can develop a version wich match my requirements. But anyway KeePass is the best...so many interesting features Thank you guys
Hi, Maybe it should be a good idea to integrate Active Directory authentification or SSO or something like CAS. Also in the next version (major one) if the concept of Group/User (OU/U) is provided it will be nice...right now it's very close of a perfect professional solution.
Resolved myself...the trigger was not set on the right event...instead of app init i use on open database and it work fine. By the way amazing product...by far the best
This is my line : /c echo DBS init on %DATE% %TIME% by %USERDNSDOMAIN% %USERDOMAIN% %USERNAME% DB:{DB_PATH} {DB_DIR} {DB_NAME} {DB_BASENAME} >> "..\KpLogRecord.txt" All is writen in my file except those field {DB_PATH} {DB_DIR} {DB_NAME} {DB_BASENAME} they all return a empty string if I try with {APPDIR} it work....it write the path of the KeePass.exe folder in the KpLogRecord.txt file Its like {DB_PATH} {DB_DIR} {DB_NAME} {DB_BASENAME} are not implemented in the echo fonction or something like ...
Hi, In a trigger I want to echo any of those placeholder value {DB_PATH} {DB_DIR} {DB_NAME} {DB_BASENAME} but did'nt work. It simply output a empty string. Work fine with {APPDIR} but none of the "DB " placeholder value work. Bottom line we have a couple of group of users and we have to separate the database with one admin database. But i want to use a single exe directory so i dont have to set up trigger in multiple keepass app folder. We want to audit modification with the database name includ...