Cross-Site Request Forgery Vulnerability in Matomo Analytics by Matomo

CVE-2024-38766

What is CVE-2024-38766?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Matomo Analytics, a widely used web analytics platform. This vulnerability affects multiple versions of the product, allowing unauthorized actions to be performed on behalf of authenticated users without their consent. Cybercriminals could exploit this weakness to manipulate user sessions, potentially leading to undesirable actions such as dismissing alerts or altering important settings. It is critical for users of Matomo Analytics to apply updates and implement appropriate security measures to mitigate potential risks associated with this vulnerability.

References