A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
CVE-2025-3155
CVSS base score
7.4 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-601
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Affected products
gnome yelp
debian debian linux
redhat codeready linux builder
redhat codeready linux builder for arm64
redhat codeready linux builder for arm64 eus
redhat codeready linux builder for eus
redhat codeready linux builder for ibm z systems
redhat codeready linux builder for ibm z systems eus
redhat codeready linux builder for power little endian
redhat codeready linux builder for power little endian eus
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory