Описание
Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| matomo | not-affected | package |
Связанные уязвимости
nvd
больше 13 лет назад
Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters.
github
больше 4 лет назад
Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests