← Vulnerability feed

Vulnerability record · CVE-2023-42920 · published 19 March 2024

CVE-2023-42920: Claris pro uncontrolled search path element vulnerability

Claris · Claris Pro

Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.

7.8 CVSS 3.1 High EPSS 0.18% · top 93.3% CWE-427 · Uncontrolled search path element
7.8CVSS 3.1 base score
0.18%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.claris.com/s/article/FileMaker-Security-Information?language=en_US Vendor Advisory
https://support.claris.com/s/article/FileMaker-Security-Information?language=en_US Vendor Advisory

Track CVE-2023-42920 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2014-8347Claris filemaker pro improper authentication vulnerabilityAn Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.…EPSS 1.4%5.5CVE-2021-44147Claris filemaker pro xml external entity (xxe) vulnerabilityAn XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files …EPSS 1.2%4.9CVE-2023-42954Claris pro execution with unnecessary privileges vulnerabilityA privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websites when signed in to the Admi…EPSS 0.45%

Source: NIST National Vulnerability Database (record CVE-2023-42920), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.