CVE-2025-1714
March 7, 2025, 5:15 a.m.
None
No Score
Description
Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server
Product(s) Impacted
| Product | Versions |
|---|---|
| Perforce Gliffy |
|
Weaknesses
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Tags
Date
- Published: March 5, 2025, 3:15 p.m.
- Last Modified: March 7, 2025, 5:15 a.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
security@puppet.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.