7.4

CVE-2025-3155: debian debian_linux Open Redirect

CVSS: 7.4v3.1HighModified
AliasesMGASA-2025-0297SUSE-SU-2025:02153-1SUSE-SU-2025:02168-1
Published 03-04-2025Last modified 29-06-2026
Open JSON

Vulnerability summary

CVE-2025-3155 is a high (CVSS 7.4) Open Redirect vulnerability in debian debian_linux. EPSS estimates a 13.12% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
42/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.4/10
010
High · v3.1 (CVE.org)
EPSS score
13.12%
0%100%
Medium · -1.09 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2github, reference

Timeline

  1. 03-04-2025
    PublishedVulnerability first disclosed.
  2. 29-06-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

13.12%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

-1.09 pp

From 14.21% on 18-09-2026

18-09-202618-10-2026
EPSS score
13.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • githubUnverified

    E970B155358D45B298D7024Edd9B17F2

    Maturity: poc

  • referenceUnverified

    Exploit Reference (bugzilla.redhat.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat26 products
Suse7 products
  • yelp-xsl&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP6< 41.1-150400.3.3.1
  • yelp-xsl&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7< 41.1-150400.3.3.1
  • yelp-xsl&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 3.20.1-6.3.1
  • yelp&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP6< 42.2-150600.3.3.1
  • yelp&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7< 42.2-150600.3.3.1
Opensuse4 products
  • yelp-xsl&distro=openSUSE Leap 15.6< 41.1-150400.3.3.1
  • yelp-xsl&distro=openSUSE Tumbleweed< 42.1-2.1
  • yelp&distro=openSUSE Leap 15.6< 42.2-150600.3.3.1
  • yelp&distro=openSUSE Tumbleweed< 42.2-4.1
Debian3 products
  • yelp< 42.2-3 | < 42.2-1+deb12u1 | < 3.38.3-1+deb11u1
  • yelp-xsl< 42.1-4 | < 42.1-2+deb12u1 | < 3.38.3-1+deb11u1
  • debian_linuxEOL11.0
Mageia2 products
  • yelp< 42.2-1.1.mga9
  • yelp-xsl< 42.1-1.1.mga9
Ubuntu2 products
  • yelp< 3.18.1-1ubuntu4+esm2 | < 3.26.0-1ubuntu2+esm2 | < 3.36.2-0ubuntu1.1 | < 42.1-1ubuntu0.1 | < 42.2-1ubuntu0.24.04.1
  • yelp-xsl< 3.36.0-1ubuntu0.1 | < 42.0-1ubuntu0.1 | < 42.1-2ubuntu0.24.04.1
Gnome1 product

7 vendors · 45 products

References

47 links
Show all 47 references