CVE-2021-23827

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-23827
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23827.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-23827
Published
2021-02-23T00:15:12.533Z
Modified
2026-04-10T05:44:25.892562Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker.

References

Affected packages

Git / github.com/keybase/client

Affected ranges

Type
GIT
Repo
https://github.com/keybase/client
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f50a180af74bd3fd523b409fea747d5c04694f0a
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f3b21527b9cdf62fa5fe5011f436c0de0101d1ad
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "5.6.1"
        }
    ]
}

Affected versions

0.*
0.1.1
0.1.2
0.1.3
0.1.6
0.1.7
0.1.8
0.8.1
1.*
1.0.0-28
Other
dummy-build
help
trailing-comma-after
trailing-comma-before
v1.*
v1.0.0-14
v1.0.0-15
v1.0.0-16
v1.0.0-17
v1.0.0-18
v1.0.0-19
v1.0.0-20
v1.0.0-21
v1.0.0-22
v1.0.0-23
v1.0.0-24
v1.0.0-25
v1.0.0-27
v1.0.0-28
v1.0.0-29
v1.0.0-29a
v1.0.0-29b
v1.0.0-29c
v1.0.0-29d
v1.0.0-29e
v1.0.0-29f
v1.0.0-29g
v1.0.0-30
v1.0.0-31
v1.0.0-32
v1.0.0-34
v1.0.0-35
v1.0.0-36
v1.0.0-37
v1.0.0-38
v1.0.0-39
v1.0.0-40
v1.0.0-41
v1.0.0-42
v1.0.0-43
v1.0.0-44
v1.0.0-45
v1.0.0-46
v1.0.0-47
v1.0.0-beta.1
v1.0.0-beta.8
v1.0.1-0
v1.0.12-0
v1.0.13-0
v1.0.14-0
v1.0.14-1
v1.0.15
v1.0.16
v1.0.17
v1.0.18
v1.0.19
v1.0.2-0
v1.0.20
v1.0.21
v1.0.22
v1.0.27
v1.0.28
v1.0.29
v1.0.3-0
v1.0.30
v1.0.31
v1.0.33
v1.0.34
v1.0.36
v1.0.39
v1.0.4-0
v1.0.4-4
v1.0.40
v1.0.41
v1.0.43
v1.0.44
v1.0.46
v1.0.47
v1.0.48
v1.0.5-0
v1.0.5-1
v1.0.5-2
v1.0.5-4
v1.0.5-5
v1.0.5-6
v1.0.5-6-windows
v1.0.5-7-windows
v1.0.6-0
v1.0.6-0-windows
v1.0.6-1
v1.0.6-1-windows
v1.0.7-0
v1.0.7-0-windows
v1.0.8-0
v1.0.8-0-windows
v1.0.9-0
v1.0.9-1
v2.*
v2.0.0
v2.1.0
v2.3.0
v2.5.0
v2.6.0
v2.7.0
v2.8.0
v2.9.0
v5.*
v5.6.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23827.json"