CVE-2024-42029

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
n/an/an/a
xdgdesktop_portal_hyperland< 1.3.3

References

Timeline

Published
Jul 27, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-42035.4The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions uCVE-2024-420306.2Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may CVE-2024-420317.5Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect servicCVE-2024-420325.5Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect serviceCVE-2024-420337.1Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity CVE-2024-420345.5LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2024-420357.8Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality CVE-2024-420367.5Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-420376.2Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confideCVE-2024-420387.8Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect serviceCVE-2024-420397.5Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2024-42044.3The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,
CVE-2024-42029: Medium severity, CVSS 6.3 | Vulnix