Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-1714

Username Enumeration in Gliffy

Description

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Perforce Gliffy

Default version status: unaffected

  • 0 to < 4.14.0-7affected

References