VulnerabilityDeferred

CVE-2025-27153

Escalade GLPI plugin is a ticket escalation process helper for GLPI.

MEDIUM 6.5EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS: 0.24% probability · 15th percentile
CISA KEV: Not listed
Weakness: CWE-284
Source: security-advisories@github.com

References

https://github.com/pluginsGLPI/escalade/releases/tag/2.9.11
https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.