Medium severity6.5OSV Advisory· Published Jul 1, 2025· Updated Apr 15, 2026

CVE-2025-27153

Description

Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.

Affected products

Pluginsglpi/EscaladeOSV
Range: 0.85-1.1, 0.90+1.0.1, 0.90-1.0, …

Patches

09676e16104d

https://github.com/pluginsglpi/escaladevia osv

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

github.com/pluginsGLPI/escalade/releases/tag/2.9.11nvd
github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000