GHSA-2qr8-h6pq-m27vMedium
Piwik (now Matomo) Vulnerable to Arbitrary Code Execution
🔗 CVE IDs covered (1)
📋 Description
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.
🎯 Affected products2
- composer/piwik/piwik:>= 1.2, < 1.5
- composer/matomo/matomo:>= 1.2, < 1.5
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2011-4941
- http://www.openwall.com/lists/oss-security/2012/03/18/1
- http://www.openwall.com/lists/oss-security/2012/03/19/8
- https://web.archive.org/web/20110626223028/http://piwik.org/blog/2011/06/piwik-1-5-security-advisory
- https://github.com/advisories/GHSA-2qr8-h6pq-m27v