VYPR
← All advisories
Medium severity4.3NVD Advisory· Published May 20, 2019· Updated Jun 17, 2026

CVE-2019-12215

CVE-2019-12215

Description

A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this issue, stating "avoid reporting path disclosures, as we don't consider them as security vulnerabilities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Matomo/Matomo2 versions
    cpe:2.3:a:matomo:matomo:3.9.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:matomo:matomo:3.9.1:*:*:*:*:*:*:*
    • (no CPE)range: <3.9.1
  • Matomo/Matomodescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.