Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests

MEDIO 5.0CVE-2013-2633 · GHSA-v8h8-93mx-82h5 · Published 21/03/2013 · updated 16/06/2026

En resumen

CVE-2013-2633 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a matomo/matomo, piwik/piwik, matomo (matomo).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.99%, mayor que el 62.6% de las vulnerabilidades.
Solución: actualizar a 1.11 o posterior.

Package	Affected versions	Patched versions
matomo/matomo Packagist	`< 1.11`	`1.11`
piwik/piwik Packagist	`< 1.11`	`1.11`
matomo matomo	`= 1.0= 1.1= 1.1.1= 1.10= 1.2= 1.2.1= 1.3= 1.4= 1.5= 1.5.1= 1.6= 1.7= 1.7.1= 1.8= 1.8.1= 1.8.2= 1.8.3= 1.8.4= 1.9.1= 1.9.2≤ 1.10.1`	No fix yet

Description

Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2013-2633 · ADVISORY
matomo-org/matomo · PACKAGE
web.archive.org/web/20130313093839/http://piwik.org/blog/2013/03/piwik-1-11 · WEB
piwik.org/blog/2013/03/piwik-1-11

Más vulnerabilidades de matomo/matomo

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

matomo/matomo

Packagist

< 1.11

1.11

piwik/piwik

Packagist

< 1.11

1.11

matomo

= 1.0= 1.1= 1.1.1= 1.10= 1.2= 1.2.1= 1.3= 1.4= 1.5= 1.5.1= 1.6= 1.7= 1.7.1= 1.8= 1.8.1= 1.8.2= 1.8.3= 1.8.4= 1.9.1= 1.9.2≤ 1.10.1

No fix yet

Description

NVD description

Más vulnerabilidades de matomo/matomo

Ver todo →