CVE-2025-27153

{"id": "CVE-2025-27153", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "published": "2025-07-01T19:15:25.970", "references": [{"url": "https://github.com/pluginsGLPI/escalade/releases/tag/2.9.11", "source": "security-advisories@github.com"}, {"url": "https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9", "source": "security-advisories@github.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11."}, {"lang": "es", "value": "El complemento Escalade GLPI ayuda a escalar tickets en GLPI. Antes de la versi\u00f3n 2.9.11, exist\u00eda una vulnerabilidad de control de acceso inadecuado. Esto pod\u00eda provocar la exposici\u00f3n de datos e interrupciones en el flujo de trabajo. Este problema se ha corregido en la versi\u00f3n 2.9.11."}], "lastModified": "2025-07-03T15:14:12.767", "sourceIdentifier": "security-advisories@github.com"}