It was possible to manipulate the full page cache to store incorrect pages under regular page URL entries.
Part of patch MAGENTO 2.0.10 AND 2.1.2 SECURITY UPDATE
This vulnerability affects the following application versions:
- Magento 2.0.0
- Magento 2.0.1
- Magento 2.0.2
- Magento 2.0.3
- Magento 2.0.4
- Magento 2.0.5
- Magento 2.0.6
- Magento 2.0.7
- Magento 2.0.8
- Magento 2.0.9
- Magento 2.1.0
- Magento 2.1.0-rc3
- Magento 2.1.1