Open Redirect Vulnerability in Netflix Security Monkey

CVE-2017-7266

What is CVE-2017-7266?

A security flaw exists in Netflix Security Monkey versions prior to 0.8.0 that allows for Open Redirect attacks. This vulnerability arises from how the logout functionality processes the 'next' parameter, which can redirect users to unauthorized external domains regardless of the Host header. This could potentially be exploited by attackers to lure users into phishing sites or malicious environments, posing significant risks to user data and application integrity.

References