Skip to content

Product

fastly/magento2 vulnerabilities

1 published CVE affecting fastly/magento2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest fastly/magento2 CVEs

Newest publication first

  1. CVE-2017-13761 Fastly Magento2 sensitive information disclosure

    Published
    MediumCVSS 6.5 EPSS 1.2%

    The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.