Gliffy

4 CVEs across 2 Gliffy products. Browse Gliffy vulnerabilities, severities, and proof-of-concept exploits.

Gliffy products with known CVEs

ProductCVEs
Gliffy Online3
Gliffy1
Gliffy CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-51742025-02-24A flaw in Gliffy results in broken authentication through the reset functionality of the application.
CVE-2024-71412025-02-20Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw.
CVE-2024-103152024-11-11In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD.
CVE-2012-29282012-05-22The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML pars…