matomo-org/matomo · Security
Piwik (now Matomo) Vulnerable to Arbitrary Code Execution
- GHSA ID
- GHSA-2qr8-h6pq-m27v
- CVE ID
- CVE-2011-4941
- Severity
- medium
- Published
- Updated
- CVSS v4
- 6.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Description
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors.
CWEs
- CWE-269 · Improper Privilege Management
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-4941 ↗
- http://www.openwall.com/lists/oss-security/2012/03/18/1 ↗
- http://www.openwall.com/lists/oss-security/2012/03/19/8 ↗
- https://web.archive.org/web/20110626223028/http://piwik.org/blog/2011/06/piwik-1-5-security-advisory ↗
- https://github.com/advisories/GHSA-2qr8-h6pq-m27v ↗