← Database

CVE-2021-44147

MEDIUM CVSS: 5.5 Published: 2021-11-22 Modified: 2026-06-17

Description

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

Affected Platforms

Claris Filemaker ProClaris Filemaker Server

Weakness Type

CWE-611

References