CVE-2025-27153

6.5 mediumEPSS 0.3%

Medium (6.5). EPSS 0.3% chance of exploitation in the next 30 days.

Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-07-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/pluginsGLPI/escalade/releases/tag/2.9.11
https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9

Check your stack JSON