medium5.5
CVE-2021-44147
An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a craf…
Impact
An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Claris | Filemaker Pro | before 19.4.1 |
| Claris | Filemaker Server | before 19.4.1 |