CVE-2026-123623

Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows unauthenticated attackers to read other organizations' form response files. Attackers can use form and field IDs exposed in public form payloads with a chosen path parameter to...

CVE-2026-123623 Grida through 0.0.24 Missing Authorization in Forms File-Preview API

Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows unauthenticated attackers to read other organizations' form response files. Attackers can use form and field IDs exposed in public form payloads with a chosen path parameter to...

CVE-2026-123623

The Grida platform, versions through 0.0.24 , is vulnerable to a missing authorization flaw in the Forms file-preview API routes. This vulnerability allows unauthenticated attackers to access and read form response files belonging to other organizations. By leveraging form and field IDs from publ...

CVE-2026-123623: gridaco grida: Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows…

Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows unauthenticated attackers to read other organizations' form response files. Attackers can use form and field IDs exposed in public form payloads with a chosen path parameter to...