Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Greenwoodsoftware records in CISA KEVNo Greenwoodsoftware vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00628 · Published 2024-04-13 · Partial fix CWE-96
Priority LOW 36
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01059 · Published 2024-02-19 · Partial fix CWE-78
