Approved changes feed: RSS · Atom

cpe:2.3:a:netflix:security_monkey:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetflix (f1ee56ff-77ab-5372-890c-4c8d187c3b7c)
ProductSecurity Monkey (ff9a40c4-89dd-5763-b404-699a069c57a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/netflix/security_monkey purl2cpe 2026-06-01 10:14:04.722266

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7266 vulnerable 2026-06-08 05:09:55.575142 Details available
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
Published: 2017-03-26T05:47:00.000Z
Updated: 2024-08-05T15:56:36.399Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.