{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-27153","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","state":"PUBLISHED","assignerShortName":"GitHub_M","dateReserved":"2025-02-19T16:30:47.780Z","datePublished":"2025-07-01T18:27:50.677Z","dateUpdated":"2025-07-01T19:35:43.790Z"},"containers":{"cna":{"title":"Escalade GLPI Plugin Vulnerable to Improper Access Control","problemTypes":[{"descriptions":[{"cweId":"CWE-284","lang":"en","description":"CWE-284: Improper Access Control","type":"CWE"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}}],"references":[{"name":"https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9","tags":["x_refsource_CONFIRM"],"url":"https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-pvqv-8r3r-47m9"},{"name":"https://github.com/pluginsGLPI/escalade/releases/tag/2.9.11","tags":["x_refsource_MISC"],"url":"https://github.com/pluginsGLPI/escalade/releases/tag/2.9.11"}],"affected":[{"vendor":"pluginsGLPI","product":"escalade","versions":[{"version":"< 2.9.11","status":"affected"}]}],"providerMetadata":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2025-07-01T18:27:50.677Z"},"descriptions":[{"lang":"en","value":"Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11."}],"source":{"advisory":"GHSA-pvqv-8r3r-47m9","discovery":"UNKNOWN"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-01T19:34:37.266649Z","id":"CVE-2025-27153","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-07-01T19:35:43.790Z"}}]}}