Matomo

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Matomo records in CISA KEV

No Matomo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Piwik Fpm-alpine Docker Image · all components

TI-2020-17767 CVE-2020-29578 · GHSA-h496-jfcc-fq24

MEDIUM 46

The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2020-12-08 No fix listed