| Package | Affected versions | Patched versions |
|---|---|---|
| fastly/magento2 | < 1.2.26 | 1.2.26 |
| fastly | ≤ 1.2.25 |
The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free