CVE-2021-44147
Medium
Description
An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.
SeverityMedium
CVSS5.5
Exploit probability—
ProductClaris Filemaker Pro
PublishedNov 22, 2021
First seenNov 22, 2021
How to fix
Update
- claris filemaker_pro19.4.1 or later
- claris filemaker_server19.4.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| claris filemaker_pro | v < 19.4.1 | 19.4.1 |
| claris filemaker_server | v < 19.4.1 | 19.4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.