Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-48624

21
FAUCET Score

CVE-2022-48624 is a high-severity vulnerability affecting less versions prior to 606, where the close_altfile function in filename.c fails to properly sanitize the LESSCLOSE environment variable. This local vulnerability, with a CVSS score of 7.8, allows an authenticated attacker to achieve high confidentiality, integrity, and availability impacts through local execution. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 606CPE matchmatch criteria
cpe:2.3:a:greenwoodsoftware:less:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.06%
Probability of exploitation in next 30 days
EPSS Percentile
61.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0106 is in the 93rd percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (49)

denopatch availablevia llm_extracted
View patch
github_advisorypatch availablevia nvd_reference
View patch
keraspatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: cbl2 less 590-4 on CBL Mariner 2.0Fixed in: 590-3
microsoftpatch availablevia msrc
Product: 19518-16823Fixed in: 590-3
microsoftpatch availablevia msrc
Product: 19896-17086Fixed in: 590-3
microsoftpatch availablevia msrc
Product: cbl2 less 590-3 on CBL Mariner 2.0Fixed in: 590-3
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/cluster-logging-rhel8-operator:v5.6.18-7
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/elasticsearch6-rhel8:v6.8.1-409
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/elasticsearch-operator-bundle:v5.6.18-16
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-481
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/elasticsearch-rhel8-operator:v5.6.18-7
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/eventrouter-rhel8:v0.4.0-246
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/fluentd-rhel8:v1.14.6-216
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/kibana6-rhel8:v6.8.1-430
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/log-file-metric-exporter-rhel8:v1.1.0-226
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/logging-curator5-rhel8:v5.8.1-472
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/logging-loki-rhel8:v2.9.6-16
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/logging-view-plugin-rhel8:v5.6.18-3
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/loki-operator-bundle:v5.6.18-30
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/loki-rhel8-operator:v5.6.18-12
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/lokistack-gateway-rhel8:v0.1.0-528
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/opa-openshift-rhel8:v0.1.0-226
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/vector-rhel8:v0.21.0-127
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/cluster-logging-operator-bundle:v5.7.13-16
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/cluster-logging-rhel8-operator:v5.7.13-7
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/elasticsearch6-rhel8:v6.8.1-408
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/elasticsearch-operator-bundle:v5.7.13-19
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-480
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/elasticsearch-rhel8-operator:v5.7.13-9
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/eventrouter-rhel8:v0.4.0-248
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/fluentd-rhel8:v1.14.6-215
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/kibana6-rhel8:v6.8.1-431
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/log-file-metric-exporter-rhel8:v1.1.0-228
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/logging-curator5-rhel8:v5.8.1-471
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/logging-loki-rhel8:v2.9.6-15
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/loki-operator-bundle:v5.7.13-27
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/loki-rhel8-operator:v5.7.13-12
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/lokistack-gateway-rhel8:v0.1.0-527
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/opa-openshift-rhel8:v0.1.0-225
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/vector-rhel8:v0.28.1-57
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.7-RHEL-8Fixed in: openshift-logging/logging-view-plugin-rhel8:v5.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: less-0:530-2.el8_9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: less-0:530-3.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: less-0:530-2.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: less-0:530-2.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: less-0:590-3.el9_3
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.6-RHEL-8Fixed in: openshift-logging/cluster-logging-operator-bundle:v5.6.18-16
View patch
ubuntupatch availablevia ubuntu_usn
Product: less (trusty)Fixed in: 458-2ubuntu0.1~esm2

Vendor Advisories (5)

ubuntuUSN-8079-1

less vulnerability

Mar 5, 2026
denollm-deno-b67a3af2ce0be075CRITICAL

HP ThinPro 8.0 SP 9 Security Updates

Jun 17, 2024
kerasllm-keras-7d8c31fee70361dcCRITICAL

HP ThinPro 8.0 SP 9 Security Updates

Jun 17, 2024
redhatCVE-2022-48624Moderate

less: missing quoting of shell metacharacters in LESSCLOSE handling

Feb 19, 2024
microsoft2024-Feb/CVE-2022-48624Important

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Feb 13, 2024

References

github.com / gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144
Patch
github.com / gwsw/less/compare/v605...v606
Patch
greenwoodsoftware.com / less
Release Notes
lists.debian.org / debian-lts-announce/2024/05/msg00018.html
Mailing ListThird Party Advisory
security.netapp.com / advisory/ntap-20240605-0010
Third Party Advisory