CVE-2017-13761 - CVE House
Back to Database
Status published Medium CVE-2017-13761

The Fastly CDN module before 1.2.26 for Magento2, when used...

Vulnerability Description

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-13761

Credits & Attribution

No credits recorded in the NVD database.

References

More from fastly

View All →
CVE-2024-38375
@fastly/js-compute use-after-free in some host call implementations
Medium 5.3
CVE-2022-39218
Random number seed fixed during compilation
High 7.5

Affected Vendor

Affected Software

fastly
Vulnerable Versions:
0

Timeline

Official Publish: September 14th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.