CVE-2024-56358
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 20, 2024
Updated: Mar 12, 2025
CWE ID 79
Summary
CVE-2024-56358 is a vulnerability affecting the grist-core spreadsheet hosting server. Malicious documents with SVG file attachments can be exploited, allowing attackers to compromise user accounts. This occurs when JavaScript code in the SVG file is evaluated in the user's current page context. To mitigate this issue, users are advised to upgrade to version 1.3.2. For those unable to upgrade, it is recommended to avoid previewing attachments from untrusted sources.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.