CVE-2025-3155

EUVD-2025-9635
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.4 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 96.3%
Affected Products (NVD)
VendorProductVersion
gnomeyelp
42.2-8
debiandebian_linux
11.0
redhatcodeready_linux_builder
8.0
redhatcodeready_linux_builder
9.0
redhatcodeready_linux_builder_for_arm64
8.0_aarch64:_aarch64
redhatcodeready_linux_builder_for_arm64
9.0_aarch64:_aarch64
redhatcodeready_linux_builder_for_arm64_eus
8.8_aarch64:_aarch64
redhatcodeready_linux_builder_for_arm64_eus
9.2_aarch64:_aarch64
redhatcodeready_linux_builder_for_arm64_eus
9.4_aarch64:_aarch64
redhatcodeready_linux_builder_for_arm64_eus
9.6_aarch64:_aarch64
redhatcodeready_linux_builder_for_eus
8.8
redhatcodeready_linux_builder_for_eus
9.2
redhatcodeready_linux_builder_for_eus
9.4
redhatcodeready_linux_builder_for_ibm_z_systems
8.0_s390x:_s390x
redhatcodeready_linux_builder_for_ibm_z_systems
9.0_s390x:_s390x
redhatcodeready_linux_builder_for_ibm_z_systems_eus
8.8_s390x:_s390x
redhatcodeready_linux_builder_for_ibm_z_systems_eus
9.2_s390x:_s390x
redhatcodeready_linux_builder_for_ibm_z_systems_eus
9.4_s390x:_s390x
redhatcodeready_linux_builder_for_ibm_z_systems_eus
9.6_s390x:_s390x
redhatcodeready_linux_builder_for_power_little_endian
8.0_ppc64le:_ppc64le
redhatcodeready_linux_builder_for_power_little_endian
9.0_ppc64le:_ppc64le
redhatcodeready_linux_builder_for_power_little_endian_eus
8.8_ppc64le:_ppc64le
redhatcodeready_linux_builder_for_power_little_endian_eus
9.2_ppc64le:_ppc64le
redhatcodeready_linux_builder_for_power_little_endian_eus
9.4_ppc64le:_ppc64le
redhatcodeready_linux_builder_for_power_little_endian_eus
9.6_ppc64le:_ppc64le
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux_eus
9.2
redhatenterprise_linux_eus
9.4
redhatenterprise_linux_eus
9.6
redhatenterprise_linux_for_arm_64
8.0
redhatenterprise_linux_for_arm_64
8.8_aarch64:_aarch64
redhatenterprise_linux_for_arm_64
9.0_aarch64:_aarch64
redhatenterprise_linux_for_arm_64
9.2_aarch64:_aarch64
redhatenterprise_linux_for_arm_64_eus
9.4_aarch64:_aarch64
redhatenterprise_linux_for_arm_64_eus
9.6_aarch64:_aarch64
redhatenterprise_linux_for_ibm_z_systems
8.0_s390x:_s390x
redhatenterprise_linux_for_ibm_z_systems
9.0_s390x:_s390x
redhatenterprise_linux_for_ibm_z_systems_eus
8.8_s390x:_s390x
redhatenterprise_linux_for_ibm_z_systems_eus
9.2_s390x:_s390x
redhatenterprise_linux_for_ibm_z_systems_eus
9.4_s390x:_s390x
redhatenterprise_linux_for_ibm_z_systems_eus
9.6_s390x:_s390x
redhatenterprise_linux_for_power_little_endian
8.0_ppc64le:_ppc64le
redhatenterprise_linux_for_power_little_endian
9.0_ppc64le:_ppc64le
redhatenterprise_linux_for_power_little_endian_eus
8.8_ppc64le:_ppc64le
redhatenterprise_linux_for_power_little_endian_eus
9.2_ppc64le:_ppc64le
redhatenterprise_linux_for_power_little_endian_eus
9.4_ppc64le:_ppc64le
redhatenterprise_linux_for_power_little_endian_eus
9.6_ppc64le:_ppc64le
redhatenterprise_linux_server_aus
8.2
redhatenterprise_linux_server_aus
8.4
redhatenterprise_linux_server_aus
8.6
redhatenterprise_linux_server_aus
9.2
redhatenterprise_linux_server_aus
9.4
redhatenterprise_linux_server_aus
9.6
redhatenterprise_linux_server_tus
8.4
redhatenterprise_linux_server_tus
8.6
redhatenterprise_linux_server_tus
8.8
redhatenterprise_linux_update_services_for_sap_solutions
8.4
redhatenterprise_linux_update_services_for_sap_solutions
8.6
redhatenterprise_linux_update_services_for_sap_solutions
8.8
redhatenterprise_linux_update_services_for_sap_solutions
9.0
redhatenterprise_linux_update_services_for_sap_solutions
9.2
redhatenterprise_linux_update_services_for_sap_solutions
9.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
yelp
bookworm
42.2-1+deb12u2
fixed
bookworm (security)
42.2-1+deb12u2
fixed
bullseye
vulnerable
bullseye (security)
3.38.3-1+deb11u2
fixed
forky
49.1-3
fixed
sid
49.1-3
fixed
trixie
42.2-4+deb13u1
fixed
trixie (security)
42.2-4+deb13u1
fixed
yelp-xsl
bookworm
42.1-2+deb12u1
fixed
bookworm (security)
42.1-2+deb12u1
fixed
bullseye
vulnerable
bullseye (security)
3.38.3-1+deb11u1
fixed
forky
49.0-3
fixed
sid
49.0-3
fixed
trixie
42.1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
yelp
bionic
needs-triage
focal
Fixed 3.36.2-0ubuntu1.1
released
jammy
Fixed 42.1-1ubuntu0.1
released
noble
Fixed 42.2-1ubuntu0.24.04.1
released
oracular
Fixed 42.2-1ubuntu0.24.10.1
released
plucky
Fixed 42.2-2ubuntu0.1
released
questing
not-affected
resolute
not-affected
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libyelp0
suse enterprise desktop 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise desktop 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise sap 12 SP5
3.20.1-7.3.1
fixed
suse enterprise sap 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise sap 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise server 12 SP3
3.20.1-7.3.1
fixed
suse enterprise server 12 SP5
3.20.1-7.3.1
fixed
suse enterprise server 15 SP4
41.2-150400.3.3.1
fixed
suse enterprise server 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise server 15 SP7
42.2-150600.3.3.1
fixed
yelp
suse enterprise desktop 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise desktop 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise sap 12 SP5
3.20.1-7.3.1
fixed
suse enterprise sap 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise sap 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise server 12 SP3
3.20.1-7.3.1
fixed
suse enterprise server 12 SP5
3.20.1-7.3.1
fixed
suse enterprise server 15 SP4
41.2-150400.3.3.1
fixed
suse enterprise server 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise server 15 SP7
42.2-150600.3.3.1
fixed
yelp-devel
suse enterprise desktop 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise desktop 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise sap 12 SP5
3.20.1-7.3.1
fixed
suse enterprise sap 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise sap 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise server 12 SP5
3.20.1-7.3.1
fixed
suse enterprise server 15 SP4
41.2-150400.3.3.1
fixed
suse enterprise server 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise server 15 SP7
42.2-150600.3.3.1
fixed
yelp-lang
suse enterprise desktop 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise desktop 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise sap 12 SP5
3.20.1-7.3.1
fixed
suse enterprise sap 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise sap 15 SP7
42.2-150600.3.3.1
fixed
suse enterprise server 12 SP3
3.20.1-7.3.1
fixed
suse enterprise server 12 SP5
3.20.1-7.3.1
fixed
suse enterprise server 15 SP4
41.2-150400.3.3.1
fixed
suse enterprise server 15 SP6
42.2-150600.3.3.1
fixed
suse enterprise server 15 SP7
42.2-150600.3.3.1
fixed
yelp-xsl
suse enterprise desktop 15 SP6
41.1-150400.3.3.1
fixed
suse enterprise desktop 15 SP7
41.1-150400.3.3.1
fixed
suse enterprise sap 12 SP5
3.20.1-6.3.1
fixed
suse enterprise sap 15 SP6
41.1-150400.3.3.1
fixed
suse enterprise sap 15 SP7
41.1-150400.3.3.1
fixed
suse enterprise server 12 SP3
3.20.1-6.3.1
fixed
suse enterprise server 12 SP5
3.20.1-6.3.1
fixed
suse enterprise server 15 SP4
41.1-150400.3.3.1
fixed
suse enterprise server 15 SP6
41.1-150400.3.3.1
fixed
suse enterprise server 15 SP7
41.1-150400.3.3.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
yelp
RHEL 8
2:3.28.1-3.el8_10.1
fixed
RHEL 8.2 AUS
2:3.28.1-3.el8_2.1
fixed
RHEL 8.4 AUS
2:3.28.1-3.el8_4.1
fixed
RHEL 8.4 E4S
2:3.28.1-3.el8_4.1
fixed
RHEL 8.4 TUS
2:3.28.1-3.el8_4.1
fixed
RHEL 8.6 AUS
2:3.28.1-3.el8_6.1
fixed
RHEL 8.6 E4S
2:3.28.1-3.el8_6.1
fixed
RHEL 8.6 TUS
2:3.28.1-3.el8_6.1
fixed
RHEL 8.8 AUS
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 E4S
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 EUS
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 TUS
2:3.28.1-3.el8_8.1
fixed
RHEL 9
2:40.3-2.el9_6.1
fixed
yelp-devel
RHEL 8
2:3.28.1-3.el8_10.1
fixed
RHEL 8.8 AUS
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 E4S
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 EUS
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 TUS
2:3.28.1-3.el8_8.1
fixed
RHEL 9
2:40.3-2.el9_6.1
fixed
yelp-libs
RHEL 8
2:3.28.1-3.el8_10.1
fixed
RHEL 8.2 AUS
2:3.28.1-3.el8_2.1
fixed
RHEL 8.4 AUS
2:3.28.1-3.el8_4.1
fixed
RHEL 8.4 E4S
2:3.28.1-3.el8_4.1
fixed
RHEL 8.4 TUS
2:3.28.1-3.el8_4.1
fixed
RHEL 8.6 AUS
2:3.28.1-3.el8_6.1
fixed
RHEL 8.6 E4S
2:3.28.1-3.el8_6.1
fixed
RHEL 8.6 TUS
2:3.28.1-3.el8_6.1
fixed
RHEL 8.8 AUS
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 E4S
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 EUS
2:3.28.1-3.el8_8.1
fixed
RHEL 8.8 TUS
2:3.28.1-3.el8_8.1
fixed
RHEL 9
2:40.3-2.el9_6.1
fixed
yelp-xsl
RHEL 8
0:3.28.0-2.el8_10.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
yelp
Amazon Linux 2
2:3.28.1-1.amzn2.0.1
fixed
yelp-debuginfo
Amazon Linux 2
2:3.28.1-1.amzn2.0.1
fixed
yelp-devel
Amazon Linux 2
2:3.28.1-1.amzn2.0.1
fixed
yelp-libs
Amazon Linux 2
2:3.28.1-1.amzn2.0.1
fixed
yelp-xsl
Amazon Linux 2
0:3.28.0-1.amzn2.0.1
fixed
yelp-xsl-devel
Amazon Linux 2
0:3.28.0-1.amzn2.0.1
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2025:4450
https://access.redhat.com/errata/RHSA-2025:4451
https://access.redhat.com/errata/RHSA-2025:4455
https://access.redhat.com/errata/RHSA-2025:4456
https://access.redhat.com/errata/RHSA-2025:4457
https://access.redhat.com/errata/RHSA-2025:4505
https://access.redhat.com/errata/RHSA-2025:4532
https://access.redhat.com/errata/RHSA-2025:7430
https://access.redhat.com/errata/RHSA-2025:7569
https://access.redhat.com/security/cve/CVE-2025-3155
https://bugzilla.redhat.com/show_bug.cgi?id=2357091
https://gitlab.gnome.org/GNOME/yelp/-/issues/221
http://www.openwall.com/lists/oss-security/2025/04/04/1
https://lists.debian.org/debian-lts-announce/2025/05/msg00036.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00037.html
https://gist.github.com/parrot409/e970b155358d45b298d7024edd9b17f2