Description
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected products
- debian / debian_linux11.0 – 11.0
- GNOME / yelp42.2-8 – 42.2-8
- RedHat / codeready_linux_builder8.0 – 8.0
- RedHat / codeready_linux_builder9.0 – 9.0
- RedHat / codeready_linux_builder_for_arm648.0_aarch64 – 8.0_aarch64
- RedHat / codeready_linux_builder_for_arm649.0_aarch64 – 9.0_aarch64
- RedHat / codeready_linux_builder_for_arm64_eus8.8_aarch64 – 8.8_aarch64
- RedHat / codeready_linux_builder_for_arm64_eus9.2_aarch64 – 9.2_aarch64
- RedHat / codeready_linux_builder_for_arm64_eus9.4_aarch64 – 9.4_aarch64
- RedHat / codeready_linux_builder_for_arm64_eus9.6_aarch64 – 9.6_aarch64
- RedHat / codeready_linux_builder_for_eus8.8 – 8.8
- RedHat / codeready_linux_builder_for_eus9.2 – 9.2
- RedHat / codeready_linux_builder_for_eus9.4 – 9.4
- RedHat / codeready_linux_builder_for_ibm_z_systems8.0_s390x – 8.0_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems9.0_s390x – 9.0_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus8.8_s390x – 8.8_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus9.2_s390x – 9.2_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus9.4_s390x – 9.4_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus9.6_s390x – 9.6_s390x
- RedHat / codeready_linux_builder_for_power_little_endian8.0_ppc64le – 8.0_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian9.0_ppc64le – 9.0_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian_eus8.8_ppc64le – 8.8_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian_eus9.2_ppc64le – 9.2_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian_eus9.4_ppc64le – 9.4_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian_eus9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux_eus9.2 – 9.2
- RedHat / enterprise_linux_eus9.4 – 9.4
- RedHat / enterprise_linux_eus9.6 – 9.6
- RedHat / enterprise_linux_for_arm_648.8_aarch64 – 8.8_aarch64
- RedHat / enterprise_linux_for_arm_648.0 – 8.0
- RedHat / enterprise_linux_for_arm_649.0_aarch64 – 9.0_aarch64
- RedHat / enterprise_linux_for_arm_649.2_aarch64 – 9.2_aarch64
- RedHat / enterprise_linux_for_arm_64_eus9.4_aarch64 – 9.4_aarch64
- RedHat / enterprise_linux_for_arm_64_eus9.6_aarch64 – 9.6_aarch64
- RedHat / enterprise_linux_for_ibm_z_systems8.0_s390x – 8.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems9.0_s390x – 9.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus8.8_s390x – 8.8_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.2_s390x – 9.2_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.4_s390x – 9.4_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.6_s390x – 9.6_s390x
- RedHat / enterprise_linux_for_power_little_endian8.0_ppc64le – 8.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian9.0_ppc64le – 9.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus8.8_ppc64le – 8.8_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.2_ppc64le – 9.2_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.4_ppc64le – 9.4_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux_server_aus8.2 – 8.2
- RedHat / enterprise_linux_server_aus8.4 – 8.4
- RedHat / enterprise_linux_server_aus8.6 – 8.6
- RedHat / enterprise_linux_server_aus9.2 – 9.2
- RedHat / enterprise_linux_server_aus9.4 – 9.4
- RedHat / enterprise_linux_server_aus9.6 – 9.6
- RedHat / enterprise_linux_server_tus8.4 – 8.4
- RedHat / enterprise_linux_server_tus8.6 – 8.6
- RedHat / enterprise_linux_server_tus8.8 – 8.8
- RedHat / enterprise_linux_update_services_for_sap_solutions8.4 – 8.4
- RedHat / enterprise_linux_update_services_for_sap_solutions8.6 – 8.6
- RedHat / enterprise_linux_update_services_for_sap_solutions8.8 – 8.8
- RedHat / enterprise_linux_update_services_for_sap_solutions9.0 – 9.0
- RedHat / enterprise_linux_update_services_for_sap_solutions9.2 – 9.2
- RedHat / enterprise_linux_update_services_for_sap_solutions9.4 – 9.4
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4450
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4451
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4455
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4456
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4457
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4505
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:4532
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:7430
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:7569
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-3155
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2357091
- MISChttps://gitlab.gnome.org/GNOME/yelp/-/issues/221
Updated 18m ago · 8 sources