CVE-2021-44147

2021-11-2221:26:04

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

References

davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/

support.claris.com/s/answerview?anum=000035751