CVE-2017-7266 Netflix Security Monkey Open Redirect vulnerability
MediumCVSS 6.1
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi security-monkey(PyPI) | < 0.8.0 | 0.8.0 |
| pypi security-monkey(PyPI) | = 0.4.0 | No fix listed |
| Netflix security monkey | <= 0.7.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- github.com product
- github.com release-notes third-party-advisory
- web.archive.org
- pypi.org product
- github.com vendor-advisory
- 97088 vdb-entry