gliffy vulnerabilities

Products

• Gliffy Online 3
• gliffy 1

Latest gliffy CVEs

Newest publication first

1. CVE-2024-5174 Broken Authentication in Gliffy

   Published 2025-02-24

   Medium·CVSS 5.3 EPSS 0.36%

   A flaw in Gliffy results in broken authentication through the reset functionality of the application.

2. CVE-2024-7141 CSRF in Gliffy

   Published 2025-02-20

   Medium·CVSS 5.9 EPSS 0.21%

   Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw.

3. CVE-2024-10315 Insecure Configuration in Gliffy Online

   Published 2024-11-11

   Medium·CVSS 6.9 EPSS 0.34%

   In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD.

4. CVE-2012-2928 The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to rea...

   Published 2012-05-22

   Medium·CVSS 6.4 EPSS 3.0%

   The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.