CVE-2024-27794
Assigner: apple
Published: 2024-04-15T22:16:30.367Z
State: PUBLISHED
problemTypes: descriptions: description: Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint.
affected: vendor: Claris
product: FileMaker Server
versions: version: unspecified
status: affected
lessThan: 20.3.2
versionType: custom
descriptions: value: Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. The vulnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login error message on the login page.