CVE-2019-14312

MEDIUMNuclei

Aptana Jaxer 1.0.3.4547 - Local File inclusion

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-14312 has a selected CVSS score of 6.5 (medium); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBAptana Jaxer 1.0.3.4547 - Local File inclusionExploitDB exploitby Steph JensenNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMAptana Jaxer 1.0.3.4547 - Local File inclusionCVSS 6.5

Aptana Jaxer 1.0.3.4547 is vulnerable to local file inclusion in the wikilite source code viewer. An attacker can read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.

Impact

Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, leading to unauthorized access and potential data leakage.

Remediation

Upgrade to a patched version of Aptana Jaxer or apply the necessary security patches to mitigate the LFI vulnerability.

WeaknessesCWE-22
Authorsdaffainfo
Template tagscve2019cvelfiedbpacketstormaptanavuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:aptana:jaxer:1.0.3.4547:*:*:*:*:*:*:*
https://www.exploit-db.com/exploits/47214 http://packetstormsecurity.com/files/153985/Aptana-Jaxer-1.0.3.4547-Local-File-Inclusion.html https://github.com/aptana/Jaxer/commits/master https://nvd.nist.gov/vuln/detail/CVE-2019-14312 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3