Greenwoodsoftware

Less

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2024-32487

  • EPSS 0.26%
  • Published 13.04.2024 15:15:52
  • Last modified 17.06.2025 20:58:12

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untr...

7.8

CVE-2022-48624

  • EPSS 0.37%
  • Published 19.02.2024 01:15:48
  • Last modified 27.03.2025 15:15:41

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.