What is CVE-2019-12593?

CVE-2019-12593 is a vulnerability in N/a. Published 2019-06-03.

Is CVE-2019-12593 known to be exploited?

8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2019-12593

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.

EPSS: 0.777 (99.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/kenzer-templates
Elsfa7-110/kenzer-templates
d4n-sec/d4n-sec.github.io
gnarkill78/CSA_
merlinepedra/nuclei-templates
merlinepedra25/nuclei-templates
sobinge/nuclei-templates

References

github.com/JameelNabbo/exploits/blob/master/IceWarp <=10.4.4 local file include… (x_refsource_MISC)
packetstormsecurity.com/files/153161/IceWarp-10.4.4-Local-File-Inclusion.html (x_refsource_MISC)

Frequently asked questions

What is CVE-2019-12593?: CVE-2019-12593 is a vulnerability in N/a. Published 2019-06-03.
Is CVE-2019-12593 known to be exploited?: 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.