Netflix: >> Security Monkey >> 0.4.1 Security Vulnerabilities
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-03-26