CVE-2016-4857

CVE-2016-4857 is an open-redirect vulnerability in Splunk products: Splunk Enterprise 6.4.x prior to 6.4.2, 6.3.x prior to 6.3.6, 6.2.x prior to 6.2.11, and Splunk Light prior to 6.4.2. The vulnerability would allow redirecting users to arbitrary websites via crafted URLs, enabling phishing risks...