CVE-2019-14312

CVE-2019-14312 describes a local file inclusion vulnerability in Aptana Jaxer 1.0.3.4547, specifically within its wikilite source code viewer. This flaw allows a remote attacker to read internal server files by manipulating the 'filename' parameter in the tools/sourceViewer/index.html URI. Rated as Medium severity with a CVSS score of 6.5, the vulnerability has a low attack complexity and high confidentiality impact, enabling unauthorized data access. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB and Nuclei templates, indicating a readily exploitable weakness. Despite this, there is no evidence of active exploitation, nor significant community discussion or media coverage.