{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/group-office-3.3.0-to-3.5.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2018-25438"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Group-Office (3.3.0 to 3.5.4)"],"_cs_severities":["high"],"_cs_tags":["path-traversal","web-vulnerability"],"_cs_type":"threat","_cs_vendors":["Intermesh"],"content_html":"\u003cp\u003eIntermesh Group-Office versions 3.3.0 through 3.5.4 contain an unauthenticated path traversal vulnerability in the compress.php component. An attacker can exploit this by sending a crafted HTTP GET request to /compress.php, manipulating the 'file' parameter with directory traversal sequences (such as '../'). The application insecurely appends this input to a cache path and passes it to the readfile() function, resulting in the disclosure of arbitrary files from the host filesystem. The Shadowserver Foundation reported exploitation in the wild starting October 21, 2023.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to read arbitrary files on the underlying host operating system, such as /etc/passwd, potentially leading to credential theft or system compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Intermesh Group-Office to version 3.5.5 or later to resolve the vulnerability.\u003c/li\u003e\n\u003cli\u003eImplement request validation on all web server inputs to block directory traversal sequences such as '../'.\u003c/li\u003e\n\u003cli\u003eRestrict access to /compress.php via web application firewall (WAF) rules or network access controls if immediate patching is not possible.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T14:14:31Z","date_published":"2026-10-22T14:14:31Z","id":"https://feed.craftedsignal.io/briefs/2026-10-group-office-path-traversal/","summary":"Intermesh Group-Office versions 3.3.0 through 3.5.4 contain an unauthenticated path traversal vulnerability in compress.php, allowing remote attackers to read arbitrary files via directory traversal sequences.","title":"Intermesh Group-Office: Unauthenticated path traversal (CVE-2018-25438)","url":"https://feed.craftedsignal.io/briefs/2026-10-group-office-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Group-Office (3.3.0 to 3.5.4)","version":"https://jsonfeed.org/version/1.1"}