Launchpad.net

CVE 2022-48624

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

CVE-2022-48624 (Candidate) is related to these bugs:

Bug #2064863: [Debian] High CVE: CVE-2022-48624/CVE-2024-32487 less : multiple CVEs

Summary				In	Importance	Status
	2064863	[Debian] High CVE: CVE-2022-48624/CVE-2024-32487 less : multiple CVEs		StarlingX	High	Fix Released

See the

CVE page on Mitre.org for more details.