PT-2025-13844

CVE-2025-31680

·

Published

2025-01-29

·

Updated

2025-06-03

Description by

CVSS 3.1
6.8
Medium
MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Matomo Analytics versions 0.0.0 through 1.23.0
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability in Drupal Matomo Analytics, allowing unauthorized actions to be performed on behalf of a user.
Recommendations For versions 0.0.0 through 1.23.0, update to version 1.24.0 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-352: Cross-Site Request Forgery (CSRF)
Related identifiers
CVE-2025-31680
GHSA-JH66-RJX8-8QQC
DRUPAL-CONTRIB-2025-008
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com