Path Traversal in Matomo

CVE-2010-2786

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.027 (84.6th percentile) — read the EPSS interpretation.

Affected products

  • Matomo — versions 0.6, 0.6.2, 0.6.3
  • N/a — versions n/a

Weakness classification (CWE)

References