cve/2023/CVE-2023-42954.md

### [CVE-2023-42954](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42954)
![](https://img.shields.io/static/v1?label=Product&message=FileMaker%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=unspecified%3C%2020.3.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=A%20privilege%20escalation%20issue%20existed%20in%20FileMaker%20Server%2C%20potentially%20exposing%20sensitive%20information%20to%20front-end%20websites%20when%20signed%20in%20to%20the%20Admin%20Console%20with%20an%20administrator%20role.&color=brighgreen)

### Description

A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websites when signed in to the Admin Console with an administrator role. This issue has been fixed in FileMaker Server 20.3.1 by reducing the information sent in requests.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/NaInSec/CVE-LIST