Is CVE-2025-3155 in the CISA KEV catalog?

No. CVE-2025-3155 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2025-3155?

CVE-2025-3155 has a CVSS v3 base score of 7.4 (HIGH).

What is the EPSS score for CVE-2025-3155?

CVE-2025-3155 has an EPSS score of 12.39% (96th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2025-3155?

Upgrade yelp on debian 11 to 3.38.3-1+deb11u1 or later. Fixes are available for 17 affected products.

CVE & CISA-KEV Catalog

CVE-2025-3155

HIGHEPSS 96th pctl

7.4

CVSS v3

NVD

Description

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

CWE-601Open Redirect

How to fix

Remediation Available

yelpDebian

Fixed in:3.38.3-1+deb11u1CVE-2025-3155

Fixed in:42.2-1+deb12u1CVE-2025-3155

Fixed in:42.2-3CVE-2025-3155

yelpRocky

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

yelpRed Hat / RHEL

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

yelp-debuginfoRed Hat / RHEL

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

yelp-debuginfoRocky

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

yelp-debugsourceRed Hat / RHEL

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

yelp-debugsourceRocky

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

yelp-develRocky

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

yelp-develRed Hat / RHEL

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

yelp-libsRocky

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

yelp-libsRed Hat / RHEL

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

yelp-libs-debuginfoRocky

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

yelp-libs-debuginfoRed Hat / RHEL

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_2.1RHSA-2025:4457

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_6.1RHSA-2025:4455

Fixed in:2:3.28.1-3.el8_10.1RHSA-2025:7569

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:3.28.1-3.el8_4.1RHSA-2025:4451

Fixed in:2:3.28.1-3.el8_8.1RHSA-2025:4532

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_0.1RHSA-2025:4450

Fixed in:2:40.3-2.el9_6.1RHSA-2025:7430

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

Fixed in:2:40.3-2.el9_4.1RHSA-2025:4456

Fixed in:2:40.3-2.el9_2.1RHSA-2025:4505

yelp-xslRocky

Fixed in:0:3.28.0-2.el8_10.1RHSA-2025:7569

yelp-xslRed Hat / RHEL

Fixed in:0:3.28.0-2.el8_10.1RHSA-2025:7569

yelpUbuntu

Fixed in:3.36.2-0ubuntu1.1USN-7447-1

Fixed in:42.1-1ubuntu0.1USN-7447-1

Fixed in:42.2-1ubuntu0.24.04.1USN-7447-1

yelp-xslUbuntu

Fixed in:3.36.0-1ubuntu0.1USN-7447-1

Fixed in:42.0-1ubuntu0.1USN-7447-1

Fixed in:42.1-2ubuntu0.24.04.1USN-7447-1

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeChanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Exploit Intelligence

12.39%probability of exploitation in 30 days

96thpercentile

Very high risk: more likely to be exploited than 96% of all known CVEs.

References

Exploit2

Third-Party Advisory10

Mailing List3

Other references1

gitlab.gnome.org

Related Vulnerabilities

Other CWE-601 (Open Redirect) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2025-4123	High	7.6	98%	-	Fix
CVE-2018-11784	Medium	4.3	94%	-	Fix
CVE-2021-22881	Medium	6.1	87%	-	Fix
CVE-2022-45402	Medium	6.1	82%	-	Fix
CVE-2017-1000117	High	8.8	78%	-	Fix
CVE-2019-10098	Medium	6.1	74%	-	Fix

Embed a live status badge for CVE-2025-3155

Markdown

[![CVE-2025-3155](https://tridentstack.com/cve/badge/CVE-2025-3155.svg)](https://tridentstack.com/cve/CVE-2025-3155)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-3155"><img src="https://tridentstack.com/cve/badge/CVE-2025-3155.svg" alt="CVE-2025-3155"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-29.