Vulnerabilities (CVE)

Filtered by vendor Matomo Subscribe
Filtered by product Matomo
Total 21 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1085 1 Matomo 1 Matomo 2023-12-10 5.0 MEDIUM N/A
Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh.