PT-2022-22807 · Portswigger · Burp Suite

Published 2022-07-08 · Updated 2023-08-08 · CVE-2022-35406

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Burp Suite versions prior to 2022.6

Description A URL disclosure issue was discovered. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.

Recommendations For versions prior to 2022.6, update to version 2022.6 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted responses in the Repeater or Intruder until a patch is available. Restrict access to potentially malicious responses to minimize the risk of exploitation.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-35406

Affected Products

Burp Suite

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-35406 · Security Note
• https://portswigger.net/burp/releases/professional-community-2022-6?requestededition=professional · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35406 · Vendor Advisory
• https://t.me/cibsecurity/45823 · Telegram Post