Greenwoodsoftware Less
2 CVEs affecting Greenwoodsoftware Less. Latest disclosed: 2024-04-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32487 | High | 8.6 | 2024-04-13 | less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically… |
CVE-2022-48624 | High | 7.8 | 2024-02-19 | close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. |