Vendor
Intermesh Group-Office versions 3.3.0 through 3.5.4 contain an unauthenticated path traversal vulnerability in compress.php, allowing remote attackers to read arbitrary files via directory traversal sequences.