| Package | Affected versions | Patched versions |
|---|---|---|
| matomo | = 0.2.25= 0.2.26= 0.2.27= 0.2.28= 0.2.29= 0.2.30= 0.2.31≤ 0.2.32 |
Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free