p PatchFirst

PatchFirst · Latest vulnerabilities

open-web-analytics/open-web-analytics vulnerabilities

Vulnerabilities published for open-web-analytics/open-web-analytics in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  2. CVE-2022-24637

    Critical · CVSS 9.8EPSS 99.06%Public exploitFix available

    CVE-2022-24637

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended "<?php sequence) aren't handled by the PHP interpreter.

    open-web-analytics/open-web-analyticsPHP
    • Update to 1.7.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →