Fastly Magento2 sensitive information disclosure

2022-05-1700:48:03

Google

osv.dev

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.

CPENameOperatorVersion
fastly/magento2eq1.2.25
fastly/magento2eq1.1.8
fastly/magento2eq1.0.5
fastly/magento2eq1.1.1
fastly/magento2eq1.2.9
fastly/magento2eq1.0.0
fastly/magento2eq1.2.5
fastly/magento2eq1.2.23
fastly/magento2eq1.2.3
fastly/magento2eq1.0.4

Name	Operator	Version
fastly/magento2	eq	1.2.25
fastly/magento2	eq	1.1.8
fastly/magento2	eq	1.0.5
fastly/magento2	eq	1.1.1
fastly/magento2	eq	1.2.9
fastly/magento2	eq	1.0.0
fastly/magento2	eq	1.2.5
fastly/magento2	eq	1.2.23
fastly/magento2	eq	1.2.3
fastly/magento2	eq	1.0.4