NetSight
IP …
high7.4

CVE-2025-3155

A flaw was found in Yelp.

Impact

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Affected products

VendorProductAffected versions
GnomeYelp
Version 42.2-8
DebianDebian Linux
Version 11.0
RedhatCodeready Linux Builder
Versions 8.0, 9.0
RedhatCodeready Linux Builder For Arm64
Versions 8.0_aarch64, 9.0_aarch64
RedhatCodeready Linux Builder For Arm64 Eus
Versions 8.8_aarch64, 9.2_aarch64, 9.4_aarch64, 9.6_aarch64
RedhatCodeready Linux Builder For Eus
Versions 8.8, 9.2, 9.4
RedhatCodeready Linux Builder For Ibm Z Systems
Versions 8.0_s390x, 9.0_s390x
RedhatCodeready Linux Builder For Ibm Z Systems Eus
Versions 8.8_s390x, 9.2_s390x, 9.4_s390x, 9.6_s390x
RedhatCodeready Linux Builder For Power Little Endian
Versions 8.0_ppc64le, 9.0_ppc64le
RedhatCodeready Linux Builder For Power Little Endian Eus
Versions 8.8_ppc64le, 9.2_ppc64le, 9.4_ppc64le, 9.6_ppc64le
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 9.2, 9.4, 9.6

Weakness classification

CWE-601

References