CVE-2018-25438 | Intermesh Group-Office up to 3.5.4 File Reading compress.php readfile path traversal

October 22, 2026 Yanac

A vulnerability has been found in Intermesh Group-Office up to 3.5.4 and classified as problematic. This issue affects the function readfile of the file compress.php of the component File Reading. Performing a manipulation of the argument File results in path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability was named CVE-2018-25438. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More