CVE-2025-3155
HIGHDescription
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Is your site exposed to CVE-2025-3155?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
7.4
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Weakness Type (CWE)
CWE-601
CWE-601
Affected Products
| Vendor | Product |
|---|---|
| gnome | yelp |
| debian | debian_linux |
| redhat | codeready_linux_builder |
| redhat | codeready_linux_builder |
| redhat | codeready_linux_builder_for_arm64 |
| redhat | codeready_linux_builder_for_arm64 |
| redhat | codeready_linux_builder_for_arm64_eus |
| redhat | codeready_linux_builder_for_arm64_eus |
| redhat | codeready_linux_builder_for_arm64_eus |
| redhat | codeready_linux_builder_for_arm64_eus |
| redhat | codeready_linux_builder_for_eus |
| redhat | codeready_linux_builder_for_eus |
| redhat | codeready_linux_builder_for_eus |
| redhat | codeready_linux_builder_for_ibm_z_systems |
| redhat | codeready_linux_builder_for_ibm_z_systems |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus |
| redhat | codeready_linux_builder_for_power_little_endian |
| redhat | codeready_linux_builder_for_power_little_endian |
| redhat | codeready_linux_builder_for_power_little_endian_eus |
| redhat | codeready_linux_builder_for_power_little_endian_eus |
| redhat | codeready_linux_builder_for_power_little_endian_eus |
| redhat | codeready_linux_builder_for_power_little_endian_eus |
| redhat | enterprise_linux |
| redhat | enterprise_linux |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64_eus |
| redhat | enterprise_linux_for_arm_64_eus |
| redhat | enterprise_linux_for_ibm_z_systems |
| redhat | enterprise_linux_for_ibm_z_systems |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_power_little_endian |
| redhat | enterprise_linux_for_power_little_endian |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_tus |
| redhat | enterprise_linux_server_tus |
| redhat | enterprise_linux_server_tus |
| redhat | enterprise_linux_update_services_for_sap_solutions |
| redhat | enterprise_linux_update_services_for_sap_solutions |
| redhat | enterprise_linux_update_services_for_sap_solutions |
| redhat | enterprise_linux_update_services_for_sap_solutions |
| redhat | enterprise_linux_update_services_for_sap_solutions |
| redhat | enterprise_linux_update_services_for_sap_solutions |
References
Exploits
Other References
https://access.redhat.com/errata/RHSA-2025:4450
https://access.redhat.com/errata/RHSA-2025:4451
https://access.redhat.com/errata/RHSA-2025:4455
https://access.redhat.com/errata/RHSA-2025:4456
https://access.redhat.com/errata/RHSA-2025:4457
https://access.redhat.com/errata/RHSA-2025:4505
https://access.redhat.com/errata/RHSA-2025:4532
https://access.redhat.com/errata/RHSA-2025:7430
https://access.redhat.com/errata/RHSA-2025:7569
https://access.redhat.com/security/cve/CVE-2025-3155
Frequently Asked Questions
What is CVE-2025-3155? +
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. It has a CVSS v3.1 base score of 7.4 (HIGH).
How severe is CVE-2025-3155? +
CVE-2025-3155 has a CVSS v3.1 score of 7.4 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-3155? +
CVE-2025-3155 affects products from debian, gnome, redhat, specifically: codeready_linux_builder, codeready_linux_builder_for_arm64, codeready_linux_builder_for_arm64_eus, codeready_linux_builder_for_eus, codeready_linux_builder_for_ibm_z_systems, codeready_linux_builder_for_ibm_z_systems_eus, codeready_linux_builder_for_power_little_endian, codeready_linux_builder_for_power_little_endian_eus, debian_linux, enterprise_linux, enterprise_linux_eus, enterprise_linux_for_arm_64, enterprise_linux_for_arm_64_eus, enterprise_linux_for_ibm_z_systems, enterprise_linux_for_ibm_z_systems_eus, enterprise_linux_for_power_little_endian, enterprise_linux_for_power_little_endian_eus, enterprise_linux_server_aus, enterprise_linux_server_tus, enterprise_linux_update_services_for_sap_solutions, yelp. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-3155? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2024-53995
SickChill is an automatic video library manager for TV shows. A user-controlled `login` endpoint's `next_` parameter takes arbitrary content. Prior …
CVE-2026-40299
next-intl provides internationalization for Next.js. Applications using the `next-intl` middleware prior to version 4.9.1with `localePrefix: 'as-needed'` could construct URLs where …
CVE-2026-42350
Kargo manages and automates the promotion of software artifacts. Prior to versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2, Kargo is vulnerable …
CVE-2026-12379
An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not …
CVE-2026-10839
Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter …
CVE-2026-10837
Open redirection vulnerability due to insufficient validation of the X-Forwarded-Host HTTP header. An attacker could create manipulated links that, when …