Medium CVE-2011-4941 EUVD-2011-4851GHSA-2qr8-h6pq-m27v

Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

Published Sep 18, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Package: matomo/matomo Package: piwik/piwik Ecosystem: Packagist

Description

Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	matomo/matomo	>= 1.2, < 1.5	1.5	GHSA-2qr8-h6pq-m27v
Packagist	piwik/piwik	>= 1.2, < 1.5	1.5	GHSA-2qr8-h6pq-m27v

References

http://piwik.org/blog/2011/06/piwik-1-5-security-advisory/
[oss-security] 20120319 Re: CVE request: piwik before 1.6 mailing-list
[oss-security] 20120318 Re: CVE request: piwik before 1.6 mailing-list