CVE-2022-35406

A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect...

CVE-2022-35406

creationtimestamp| type| source ---|---|--- 2022-07-08 20:28:24+00:00| seen| https://t.me/cibsecurity/45823 2026-06-02 18:34:11+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mndabdv3k424...

CVE-2022-35406

Burp Suite (PortSwigger) prior to 2022.6 is affected by a URL disclosure issue where viewing a crafted response in Repeater or Intruder could be interpreted as a redirect, potentially exposing the referrer. Root cause involves incorrect handling of crafted responses leading to unexpected redirect...