Live › vulnerability › CVE-2018-25438
Go to dashboardGroup-Office versions 3.3.0 before 3.5.5 let any remote visitor read arbitrary files on the server through the file parameter of compress.php. An attacker can request files such as /etc/passwd without logging in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed Group-Office version (3.3.0 to before 3.5.5 is affected) and whether /compress.php responds to a GET request with ../ in the file parameter.
Upgrade Group-Office to 3.5.5 or later. unknown for any interim workaround.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file' parameter, which is appended to the cache path and passed to readfile(), to read files such as /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-21.
This page as .md · .json · in your agent: get_signal("CVE-2018-25438")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.