CVE-2010-2786: Matomo

Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.

Affected products

• Matomo Matomo: version 0.6 only; version 0.6.1 only; version 0.6.2 only; version 0.6.3 only

Published 2010-08-02. Last modified 2026-06-16.