What is GHSA-vpq9-c67q-23fq?

GHSA-vpq9-c67q-23fq is a security advisory published by GitHub Security Advisories with Medium severity. Fastly Magento2 sensitive information disclosure

Which CVE IDs does GHSA-vpq9-c67q-23fq cover?

GHSA-vpq9-c67q-23fq covers the following CVE IDs: CVE-2017-13761. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vpq9-c67q-23fq?

GHSA-vpq9-c67q-23fq has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-vpq9-c67q-23fq?

GHSA-vpq9-c67q-23fq affects 1 product, including: composer/fastly/magento2:\u003c 1.2.26.

GHSA-vpq9-c67q-23fqMediumCVSS 6.5

Fastly Magento2 sensitive information disclosure

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2017-13761 →

📋 Description

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

🎯 Affected products1

composer/fastly/magento2:< 1.2.26

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-13761
https://www.fastly.com/security-advisories/vulnerability-fastly-open-source-cdn-module-intended-be-integrated-magento2
https://github.com/advisories/GHSA-vpq9-c67q-23fq