CVE-2017-7266

Netflix Security Monkey before 0.8.0 has an Open Redirect

published March 26, 2017

CVSS
—
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00965 · 61.1th percentile
Published
2017-03-26T05:47Z
EPSS history
Timeline
  • 26 MAR 05:47Z
    Netflix Security Monkey before 0.8.0 has an Open Redirect
    cvelistv5