CVE-2025-3155CWE-601

Yelp: arbitrary file read

High · published April 3, 2025

CVSS v3.1

7.4

EPSS

13%

Percentile

96.4

In the wild

Unconfirmed

What it is

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

The record

Technical detail

CVSS v3.1: 7.4 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.13121 · 96.4th percentile
Weakness: CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published: 2025-04-03T13:34Z

EPSS history

Timeline

03 APR 13:34Z
Yelp: arbitrary file read
cvelistv5