Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-10315

Nov. 18, 2024, 10:15 p.m.

Product(s) Impacted

Gliffy Online

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD.

The product uses a cross-domain policy file that includes domains that should not be trusted.

CWE ID: 942

Published: Nov. 11, 2024, 8:15 p.m.

Last Modified: Nov. 18, 2024, 10:15 p.m.

CVE has been recently published to the CVE List and has been received by the NVD.

More info

security@puppet.com