Information disclosure in Perforce Gliffy
CVE-2025-1714
Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server
Vulnerability class: Information Disclosure
EPSS: 0.003 (26.3th percentile) — read the EPSS interpretation.
Affected products
- Perforce Gliffy — versions 0