POC Details: 89f58a27e03028281c90629606f79544d4e88f19

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/piwik/piwik-unauthenticated-access.yaml

Associated Vulnerability

Likely 0-day

Description

Detected Piwik/Matomo instances exposing analytics data without authentication. When anonymous access was enabled, the API returned visitor statistics, page views, and other sensitive analytics data using the anonymous token.

File Snapshot


 id: piwik-unauthenticated-access

info:
  name: Piwik/Matomo - Unauthenticated Access
  author: 0x_A

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.