🟡 Severity: MEDIUM (CVSS 6.5)

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

Published: 2017-09-14
Last Modified: 2026-05-13 ⚠️

References:


View Full CVE Details on NIST NVD →

Previous Next Home