CVE-2018-25438
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability…
- Risk score
- 69/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Intermesh Group-Office 3.3.0 to 3.5.4 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files. Attackers can send GET requests to /compress.php with '../' sequences in the 'file' parameter to read files.
- Affected
- {'products': ['Intermesh Group-Office'], 'packages': [], 'versions': ['3.3.0', '3.4.0', '3.4.1', '3.4.2', '3.4.3', '3.4.4', '3.5.0', '3.5.1', '3.5.2', '3.5.3', '3.5.4']}
- Fix
- Check the linked advisory for a fix, as none is specified.
- Exploitation
- Exploited in the wild
Not confirmed. 3.5.4, 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1 isn't in the advisory. Check the vendor's advisory before acting on this.
Why it is Amber
- CVSS 7.5 high
- Remotely exploitable without logging in
- On your watchlist: php
References
Original description
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file' parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.
Last activity 22 Oct 2026. Patch Forecast updates every hour.