Latest Vulnerabilities and Exploits



CVE ID:

CVE-2021-44147

Details:

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

References:

:https://davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/
:https://support.claris.com/s/answerview?anum=000035751

ZeroDayLab Assigned Tags:

REMOTE