Skip to content
OpenAdvisories

Package · Packagist

open-web-analytics/open-web-analytics

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24637 Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Open Web Analytics

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intend…

    open-web-analytics/open-web-analytics Packagist