Netflix security monkey vulnerabilities

Latest Netflix security monkey CVEs

Newest publication first

1. CVE-2017-7266 Netflix Security Monkey Open Redirect vulnerability

   Published 2017-03-26

   Medium·CVSS 6.1 EPSS 0.97%

   Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.