CVE-2024-7141

Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery CSRF flaw...

CVE-2024-7141

Gliffy Online is affected by a CSRF vulnerability tracked as CVE-2024-7141 in versions prior to 4.14.0-7. The issue arises in the web application’s handling of requests that can be forged by an authenticated user. The connected records confirm affected software and indicate a fix in version 4.14....

CVE-2024-7141 CSRF in Gliffy

Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery CSRF flaw...

CVE-2024-7141 CSRF in Gliffy

Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery CSRF flaw...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy versions prior to 4.14.0-7 that stems from vulnerability to cross-site request forgery attacks...

PT-2025-7454 · Unknown · Gliffy Online

Name of the Vulnerable Software and Affected Versions: Gliffy Online versions prior to 4.14.0-7 Description: The issue is related to a Cross Site Request Forgery CSRF flaw. This flaw allows an attacker to trick a user into performing unintended actions on a web application that the user is...

CVE-2024-10315

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD...

CVE-2024-10315

CVE-2024-10315 concerns an insecure configuration in Gliffy Online. Multiple sources in the connected set confirm affected software as Gliffy Online with versions prior to 4.14.0-6. The root cause identified is an insecure configuration in these versions, as reported by Alpha Inferno PVT LTD. Acr...

CVE-2024-10315 Insecure Configuration in Gliffy Online

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD...

CVE-2024-10315 Insecure Configuration in Gliffy Online

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD...

PT-2024-16182 · Unknown · Gliffy Online

Name of the Vulnerable Software and Affected Versions: Gliffy Online versions prior to 4.14.0-6 Description: An insecure configuration was discovered in Gliffy Online. The issue was reported by Alpha Inferno PVT LTD. Recommendations: For versions prior to 4.14.0-6, update to version 4.14.0-6 or...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy versions prior to 4.14.0-6 that stems from an insecure configuration...

Atlassian JIRA < 5.0.1 XML Parsing DoS

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to 5.0.1. It is, therefore, potentially affected by an XML parsing flaw due to improper restrictions on the capabilities of third-party parsers. A remote, authenticated attacker c...

CVE-2012-2928

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...

Code injection

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...

CVE-2012-2928

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...

CVE-2012-2928

The CVE-2012-2928 issue affects the Gliffy plugin for Atlassian JIRA (before 3.7.1) and Gliffy for Confluence (before 4.2). The root cause is improper restriction of third‑party XML parsers, enabling remote attackers to read arbitrary files or cause a denial of service via unspecified vectors. Th...

Atlassian Tempo 6.4.3 JIRA 5.0.0 Gliffy 3.7.0 - XML Parsing Denial of Service

Atlassian Tempo 6.4.3 JIRA 5.0.0 Gliffy 3.7.0 - XML Parsing Denial of Service...

Atlassian Tempo 6.4.3 / JIRA 5.0.0 / Gliffy 3.7.0 - XML Parsing Denial of Service

source: https://www.securityfocus.com/bid/53595/info JIRA, and the Gliffy and Tempo plugins for JIRA are prone to a denial-of-service vulnerability because they fail to properly handle crafted XML data. Exploiting this issue allows remote attackers to cause denial-of-service conditions in the...

Atlassian's Confluence Cross Site Scripting

A while back I reported some bugs in Atlassian's Confluence. As everyone should have upgraded by now I feel that I can now release my proof of concept for CONF-21508 and CONF-21819. note - I uncovered and reported these bugs at different times. Issue 1 CONF-21508: the document macro did not...