CVE-2017-13761 | BDVDB-2026-90479 Detail

Description#

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.fastly.com/security-advisories/vulnerability-fastly-open-source-cdn-module-intended-be-integrated-magento2

Exploit#

No public exploit known

History#

Version 12017-09-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.