CVE-2025-3155

HIGH

MEDIUM Priority: 0.97 BB Relevance: 67/100

Published: 2025-04-03 Modified: 2026-11-04 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Network

AC: Low

PR: None

UI: Required

S: Changed

C: High

I: None

A: None

Description

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Weakness Classification (1)

CWE-601 — URL Redirection to Untrusted Site

Affected Software (65)

Vendor	Product	Version
—	—	0 < 42.2-8
—	—	0 < 42.2-8
debian	debian_linux	11.0
gnome	yelp	42.2-8
redhat	codeready_linux_builder	8.0
redhat	codeready_linux_builder	9.0
redhat	codeready_linux_builder_for_arm64	8.0_aarch64
redhat	codeready_linux_builder_for_arm64	9.0_aarch64
redhat	codeready_linux_builder_for_arm64_eus	8.8_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.2_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.4_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.6_aarch64
redhat	codeready_linux_builder_for_eus	8.8
redhat	codeready_linux_builder_for_eus	9.2
redhat	codeready_linux_builder_for_eus	9.4
redhat	codeready_linux_builder_for_ibm_z_systems	8.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems	9.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	8.8_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.2_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.4_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.6_s390x
redhat	codeready_linux_builder_for_power_little_endian	8.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian	9.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	8.8_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	9.2_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	9.4_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	9.6_ppc64le
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux_eus	9.2

Showing 30 of 65 entries