Firefart

**Name of the Vulnerable Software and Affected Versions** Matomo versions prior to 3.0.3 **Description** An authenticated remote code execution issue exists in Matomo due to the plugin upload mechanism. An authenticated user with Superuser privileges can upload and activate a malicious plugin (ZIP archive), resulting in arbitrary PHP code execution on the underlying system. From version 3.0.3, plugin upload functionality is disabled by default unless explicitly enabled in the configuration file. **Recommendations** Update to version 3.0.3 or later. As a temporary workaround, disable the plugin upload functionality in the configuration file.