July 28, 2010 - Analytics Platform

Matomo Response to ZF2010-07 Security Advisory

July 28, 2010 by

No Matomo (Piwik) releases up to and including Matomo 0.6.4 are affected by this advisory as the Dojo bundle is not included in the Matomo distribution (or svn). Matomo users are, however, encouraged to upgrade to the latest version to …

Matomo 0.6.4 Security Advisory CVE-2010-2786

July 28, 2010 by

An arbitrary file inclusion vulnerability is fixed by the latest Matomo (Piwik) 0.6.4 release. Description: Matomo versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern in a crafted request for a data renderer. …