CVE-2017-13761

CVE-2017-13761 describes a vulnerability in the Fastly CDN module for Magento2, specifically versions prior to 1.2.26, when integrated with a third-party authentication plugin. This flaw could allow remote authenticated users to extract sensitive information from authenticated sessions due to the caching of redirect responses. The vulnerability has a CVSS score of 6.5 (Medium), indicating a network-based attack with low complexity requiring prior authentication, leading to a high confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.