CVE-2021-44147 | BDVDB-2026-164757 Detail

Description#

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/
https://support.claris.com/s/answerview?anum=000035751

Exploit#

No public exploit known

History#

Version 12021-11-22Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.