CVE-2017-13761

Publication date

2017-09-14 17:00:00

Family

mitre

State

PUBLISHED

Description

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.