onyx --cves cve-2017-13761
CVE-2017-13761
- score
- <0.1
- cvss
- 6.5
- epss
- 1.2%
- published
- 2017-09-14
- kev added
- —
- first seen
Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, contains a vulnerability caused by caching redirect responses, letting remote authenticated users obtain sensitive information from sessions, exploit requires authenticated access and specific caching configuration.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx