DRUPAL-CONTRIB-2023-033
DRUPAL-CONTRIB-2023-033
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This module enables you to add the Matomo web statistics tracking system to your website. The module does not check the Matomo JS code loaded on the website. So a user could configure the module to load JS from a malicious website. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer matomo" or "administer matomo tag manager" (D8+ only) to access the settings forms where this can be configured.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/matomo Packagist:https://packages.drupal.org/8
- Plages de versions concernées
- ECOSYSTEM: < 1.22.0
Mettez à jour vers 1.22.0