Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| matomo/matomo(Packagist) | 0 | 1.11 | N/A |
| piwik/piwik(Packagist) | 0 | 1.11 | N/A |
CVSS Metrics
