CVE-2024-5174: Gliffy Online

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw in Gliffy results in broken authentication through the reset functionality of the application.

Affected products

• Gliffy Gliffy Online: from 0.0.0, before 4.14.0-7 (fixed in 4.14.0-7)

Published 2025-02-24. Last modified 2026-06-17.