Perforce Gliffy Lack of Rate Limiting in Sign-up Workflow Vulnerability

A vulnerability exists in Perforce Gliffy Online versions prior to 4.14.0-7, where the sign-up workflow lacks proper rate limiting. This deficiency allows attackers to enumerate valid user email addresses and potentially perform a denial-of-service attack on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized email enumeration and potential denial-of-service conditions on the server.

Remediation

Users can upgrade to Gliffy version 4.14.0-7 or later to address this vulnerability.