less vulnerabilities

1 known vulnerability in less from NetApp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  less: Improper Neutralization of Directives in Statically Saved Code

  CVE-2024-32487Apr 13, 2024NetApp

  less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted arch