CVE-2024-38766

Name of the Vulnerable Software and Affected Versions: Matomo Analytics versions prior to 5.1.1

Description: The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations: For Matomo Analytics versions prior to 5.1.1, update to a version that contains a fix for this issue. At the moment, there is no information about additional mitigation measures.