Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-1714 EUVD-2025-6087GHSA-4mg2-h6wh-4hj2

Username Enumeration in Gliffy

Published Mar 5, 2025 · Updated Mar 7, 2025 · Assigned by Perforce

Description

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server

Affected products

VendorProductAffectedFixed
Perforce Gliffy < 4.14.0-7 4.14.0-7

References