CVE-2024-56358

grist-core is a spreadsheet hosting server. A user visiting a malicious document and previewing an attachment could have their account compromised, because JavaScript in an SVG file would be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid previewing attachments in documents prepared by people they do not trust.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/gristlabs/grist-core/commit/a792bdc43b456dbdd6fdc50d8747f4c349fab2f4	Patch
https://github.com/gristlabs/grist-core/security/advisories/GHSA-jvfm-gf4f-33q3	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:getgrist:grist-core:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-12-20 21:15

Updated : 2025-03-12 17:33

NVD link : CVE-2024-56358

Mitre link : CVE-2024-56358

CVE.ORG link : CVE-2024-56358

JSON object : View

Products Affected

getgrist

grist-core

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2024-56358", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2024-12-20T21:15:10.673", "references": [{"url": "https://github.com/gristlabs/grist-core/commit/a792bdc43b456dbdd6fdc50d8747f4c349fab2f4", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://github.com/gristlabs/grist-core/security/advisories/GHSA-jvfm-gf4f-33q3", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "grist-core is a spreadsheet hosting server. A user visiting a malicious document and previewing an attachment could have their account compromised, because JavaScript in an SVG file would be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are advised to upgrade. Users unable to upgrade should avoid previewing attachments in documents prepared by people they do not trust."}, {"lang": "es", "value": "grist-core es un servidor de alojamiento de hojas de c\u00e1lculo. Un usuario que visite un documento malicioso y obtenga una vista previa de un archivo adjunto podr\u00eda ver comprometida su cuenta, ya que el c\u00f3digo JavaScript en un archivo SVG se evaluar\u00eda en el contexto de su p\u00e1gina actual. Este problema se ha solucionado en la versi\u00f3n 1.3.2. Se recomienda a los usuarios que actualicen la versi\u00f3n. Los usuarios que no puedan actualizar la versi\u00f3n deben evitar obtener una vista previa de los archivos adjuntos en documentos preparados por personas en las que no conf\u00edan."}], "lastModified": "2025-03-12T17:33:10.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:getgrist:grist-core:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9898E10-3477-40DA-BA74-796374CE3880", "versionEndExcluding": "1.3.2"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}