onyx

onyx --cves cve-2017-13761

CVE-2017-13761

score
<0.1
cvss
6.5
epss
1.2%
published
2017-09-14
kev added
—
first seen

Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, contains a vulnerability caused by caching redirect responses, letting remote authenticated users obtain sensitive information from sessions, exploit requires authenticated access and specific caching configuration.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2017-09-14 — PublishedP2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 1.2%2026-09-23: epss 1.2%2026-09-24: epss 1.2%2026-09-25: epss 1.2%2026-09-26: epss 1.2%2026-09-27: epss 1.2%2026-09-28: epss 1.2%2026-09-29: epss 1.2%2026-09-30: epss 1.2%2026-10-01: epss 1.2%2026-10-02: epss 1.2%2026-10-03: epss 1.2%2026-10-04: epss 1.2%2026-10-05: epss 1.2%2026-10-06: epss 1.2%2026-10-07: epss 1.2%2026-10-08: epss 1.2%2026-10-09: epss 1.2%2026-10-10: epss 1.2%2026-10-11: epss 1.2%2026-10-12: epss 1.2%2026-10-13: epss 1.2%2026-10-14: epss 1.2%2026-10-15: epss 1.2%2026-10-16: epss 1.2%2026-10-18: epss 1.2%2026-10-19: epss 1.2%2026-10-20: epss 1.2%2026-10-21: epss 1.2%1.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-200

References 1