Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2022-35406: A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.
CVE-2022-35406 · published 4 years ago
Summary
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.
What to do
- Update portswigger burp_suite to version 2022.6 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| portswigger | burp_suite |
< 2022.6 cpe:2.3:a:portswigger:burp_suite:*:*:*:*:community:*:*:* |
Original advisory text
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.
References
- https://portswigger.net/burp/releases/professional-community-2022-6?requestededi... Patch Release Notes Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-601Open Redirect
Timeline
Published8 Jul 2022
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-35406 · NVD
Track software like this
Free during beta