CVE-2025-27153CWE-284

Escalade GLPI Plugin Vulnerable to Improper Access Control

Medium · published July 1, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-07-01T18:27Z
EPSS history
Timeline
  • 01 JUL 18:27Z
    Escalade GLPI Plugin Vulnerable to Improper Access Control
    cvelistv5