Xxe

2021-11-2222:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

CPENameOperatorVersion
filemaker_prolt19.4.1
filemaker_serverlt19.4.1

CPE	Name	Operator	Version
	filemaker_pro	lt	19.4.1
	filemaker_server	lt	19.4.1

References

davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/

support.claris.com/s/answerview?anum=000035751