Aptana Jaxer 1.0.3.4547 Source Code Viewer index.html filename path traversal

Summaryinfo

A vulnerability, which was classified as critical, has been found in Aptana Jaxer 1.0.3.4547. This affects an unknown part of the file tools/sourceViewer/index.html of the component Source Code Viewer. This manipulation of the argument filename with the input ../ causes path traversal. This vulnerability is registered as CVE-2019-14312. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Aptana Jaxer 1.0.3.4547. Affected by this vulnerability is an unknown functionality of the file tools/sourceViewer/index.html of the component Source Code Viewer. The manipulation of the argument filename with the input value ../ leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality. The summary by CVE is:

Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.

The weakness was published 08/09/2019. This vulnerability is known as CVE-2019-14312 since 07/27/2019. The exploitation appears to be easy. The attack can be launched remotely. The successful exploitation needs a single authentication. Technical details and also a public exploit are known. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

It is possible to download the exploit at packetstormsecurity.com. It is declared as proof-of-concept. By approaching the search of inurl:tools/sourceViewer/index.html it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (47214). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Aptana

Name

• Jaxer

Version

• 1.0.3.4547

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion