CVE-2025-3155

Published: Apr 3, 2025

Modified: Nov 11, 2025

PUBLISHED

CVSS v3.1

7.4

HIGH

Description

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Vendor	Product	Versions
Unknown	yelp	affected `0 - < 42.2-8`
Red Hat	Red Hat Enterprise Linux 8	unaffected `2:3.28.1-3.el8_10.1 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:3.28.0-2.el8_10.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	unaffected `2:3.28.1-3.el8_2.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected `2:3.28.1-3.el8_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `2:3.28.1-3.el8_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	unaffected `2:3.28.1-3.el8_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected `2:3.28.1-3.el8_6.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected `2:3.28.1-3.el8_6.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	unaffected `2:3.28.1-3.el8_6.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected `2:3.28.1-3.el8_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `2:40.3-2.el9_6.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	unaffected `2:40.3-2.el9_0.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `2:40.3-2.el9_2.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected `2:40.3-2.el9_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions