Security Advisory
CVE-2017-7266
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.