What is CVE-2019-12314?

CVE-2019-12314 is a vulnerability in N/a. Published 2019-05-24.

Is CVE-2019-12314 known to be exploited?

11 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2019-12314

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.

EPSS: 0.904 (99.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

ras313/CVE-2019-12314
0xT11/CVE-POC
20142995/nuclei-templates
ARPSyndicate/kenzer-templates
Elsfa7-110/kenzer-templates
d4n-sec/d4n-sec.github.io
developer3000S/PoC-in-GitHub
hectorgie/PoC-in-GitHub
merlinepedra/nuclei-templates
merlinepedra25/nuclei-templates

References

github.com/JameelNabbo/exploits/blob/master/Maconomy Erp local file include.txt (x_refsource_MISC)
packetstormsecurity.com/files/153079/Deltek-Maconomy-2.2.5-Local-File-Inclusion… (x_refsource_MISC)
github.com/ras313/CVE-2019-12314/security/advisories/GHSA-8762-rf4g-23xm (x_refsource_MISC)

Frequently asked questions

What is CVE-2019-12314?: CVE-2019-12314 is a vulnerability in N/a. Published 2019-05-24.
Is CVE-2019-12314 known to be exploited?: 11 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.