VULNERABILITY INTELLIGENCE

CVE-2025-27153

CVSS score6.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-07-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.

Weakness classification

  • security-advisories@github.com: CWE-284

Primary references