CVE-2025-1714

Username Enumeration in Gliffy PUBLISHED

Description (CNA)

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server

Affected (CNA)

Vendor / product	Versions
Perforce / Gliffy	affected 0 before 4.14.0-7

CWE

CWE-200, CWE-307

References

https://portal.perforce.com/s/detail/a91PA000001ScY1YAK

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.