CVE-2025-3155

Katalog CVE

CVSS 7.4 · High EPSS 13,1%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada gnome yelp, debian linux +19 lainnya. Skor CVSS 3.1 7.4 (High) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Rincian

Terbit di NVD

3 April 2025

Terakhir diubah

29 Juni 2026

Status NVD

Modified

CVSS 3.1

7.4 (High), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

13,1% peluang dieksploitasi; lebih tinggi dari 96,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 63 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2025:4450 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:4451 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:4455 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:4456 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:4457 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:4505 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:4532 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:7430 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:7569 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2025-3155 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2357091 exploit · issue tracking · advisory pihak ketiga
• https://gist.github.com/parrot409/e970b155358d45b298d7024edd9b17f2 exploit · advisory pihak ketiga
• https://gitlab.gnome.org/GNOME/yelp/-/issues/221
• http://www.openwall.com/lists/oss-security/2025/04/04/1 mailing list
• https://lists.debian.org/debian-lts-announce/2025/05/msg00036.html mailing list
• https://lists.debian.org/debian-lts-announce/2025/05/msg00037.html mailing list