CVE-2017-13761: Fastly

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

Affected products

• Fastly Fastly: up to and including 1.2.25

Published 2017-09-14. Last modified 2026-06-17.