The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involvi…
CVSS 3.0MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.01222·Published 2017-09-14·Fixed in 1.2.26CWE-200