Medium severity6.5NVD Advisory· Published Sep 14, 2017· Updated Jun 17, 2026

CVE-2017-13761

Description

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
fastly/magento2Packagist	< 1.2.26	1.2.26

Affected products

Fastly/Fastly
cpe:2.3:a:fastly:fastly:*:*:*:*:*:magento2:*:*
Range: <=1.2.25
ghsa-coords
pkg:composer/fastly/magento2
Range: < 1.2.26

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-vpq9-c67q-23fqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-13761ghsaADVISORY
www.fastly.com/security-advisories/vulnerability-fastly-open-source-cdn-module-intended-be-integrated-magento2nvdVendor AdvisoryWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000