CVE-2026-55664

{
  "id": "CVE-2026-55664",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-10T21:16:56.723",
  "lastModified": "2026-10-25T15:10:00.147",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's access rules and did not check that the requested section was actually a form. A user with only partial read access, including public access on a publicly viewable document, could request the metadata of any widget and reveal table and column structure that access rules would otherwise hide, even in documents that contain no forms. This issue is fixed in version 1.7.15."
    },
    {
      "lang": "es",
      "value": "Grist es un software de hoja de cálculo que utiliza Python como su lenguaje de fórmulas. Antes de 1.7.15, el endpoint GET /forms leía los metadatos de tablas y columnas sin aplicar las reglas de acceso del documento y no verificaba que la sección solicitada fuera realmente un formulario. Un usuario con solo acceso de lectura parcial, incluyendo acceso público en un documento visible públicamente, podía solicitar los metadatos de cualquier widget y revelar la estructura de tablas y columnas que las reglas de acceso ocultarían de otro modo, incluso en documentos que no contienen formularios. Este problema está solucionado en la versión 1.7.15."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "gristlabs",
          "product": "grist-core",
          "versions": [
            {
              "version": "< 1.7.15",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-13T18:34:28.495573Z",
          "id": "CVE-2026-55664",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/gristlabs/grist-core/commit/14694156fe99c438c5f7a452ad367e933bb194db",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gristlabs/grist-core/releases/tag/v1.7.15",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gristlabs/grist-core/security/advisories/GHSA-w2hc-w6cg-xvh9",
      "source": "[email protected]"
    }
  ]
}