CVE-2018-5755: Path Traversal
Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 before 7.8.3-rev5, and 7.8.4 before 7.8.4-rev4 allows remote attackers to read arbitrary files via a full pathname in a formula in a spreadsheet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5755?
CVE-2018-5755 has been classified as a medium-severity vulnerability.
How do I fix CVE-2018-5755?
To fix CVE-2018-5755, upgrade Open-Xchange OX App Suite to versions 7.6.3-rev4 or 7.8.2-rev4 and above.
What types of attacks can exploit CVE-2018-5755?
CVE-2018-5755 can be exploited by remote attackers to perform absolute path traversal attacks and read arbitrary files.
Which versions of Open-Xchange App Suite are affected by CVE-2018-5755?
CVE-2018-5755 affects Open-Xchange App Suite versions prior to 7.6.3-rev4, 7.8.2-rev4, and includes specific versions like 7.8.0 through 7.8.4-rev3.
Is there a workaround for CVE-2018-5755?
There are no known workarounds for CVE-2018-5755 other than upgrading to a patched version.