GitHub Advisoryadvisory · crates.io

GHSA-h5wh-7h2j-h999 Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

MEDIUM Published 2022-04-15 Modified 2022-04-26 Official page ↗
Aliases
CVE-2022-27817
Ecosystem
crates.io
Packages
Simple-Wayland-HotKey-Daemon
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weaknesses
CWE-668
Reviewed
2022-04-26

Affected packages

• crates.io Simple-Wayland-HotKey-Daemon: <= 1.1.5 (no fix yet)

Description

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality.

Related

Alias · CVE (1)

  • CVE-2022-27817 SWHKD 1.1.5 consumes the keyboard events of unintended users. vulnerability

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References