Vulnerability Description
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file' parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://cxsecurity.com/issue/WLB-2018020249
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilit
- https://www.group-office.com/
- https://www.vulncheck.com/advisories/intermesh-group-office-3.5.5-path-traversal
FAQ
What is CVE-2018-25438?
CVE-2018-25438 is a vulnerability with a CVSS score of 7.5 (HIGH). Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' param...
How severe is CVE-2018-25438?
CVE-2018-25438 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25438?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.