CVE-2017-7266 | BDVDB-2026-83227 Detail

Description#

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Netflix/security_monkey/releases/tag/v0.8.0
http://www.securityfocus.com/bid/97088
https://github.com/Netflix/security_monkey/commit/3b4da13efabb05970c80f464a50d3c1c12262466
https://github.com/Netflix/security_monkey/pull/482

Exploit#

No public exploit known

History#

Version 12017-03-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.