CVE-2017-7266

Description

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.272

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-7266 are fixed in Python-security-monkey 0.8.0	Windows
Vulnerabilities CVE-2017-7266 are fixed in Python-security-monkey for linux 0.8.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234