CVE-2025-3155
Yelp: arbitrary file read
HIGH 7.4EPSS 13.1%
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
- Affected
- Red Hat · yelp · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.2 Advanced Update Support · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Red Hat Enterprise Linux 8.4 Telecommunications Update Service · Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
- CVSS v3.1 REDHAT
- 7.4 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N - EPSS
- 13.12% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2025-04-03
- Updated
- 2026-06-29
Proof-of-concept exploits (1)
Security advisories
- https://access.redhat.com/errata/RHSA-2025:4450
- https://access.redhat.com/errata/RHSA-2025:4451
- https://access.redhat.com/errata/RHSA-2025:4455
- https://access.redhat.com/errata/RHSA-2025:4456
- https://access.redhat.com/errata/RHSA-2025:4457
- https://access.redhat.com/errata/RHSA-2025:4505
- https://access.redhat.com/errata/RHSA-2025:4532
- https://access.redhat.com/errata/RHSA-2025:7430
- https://access.redhat.com/errata/RHSA-2025:7569
- https://access.redhat.com/security/cve/CVE-2025-3155
- https://bugzilla.redhat.com/show_bug.cgi?id=2357091