VULNERABILITY INTELLIGENCE
CVE-2022-35406
CVSS score4.3 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2022-07-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.
Weakness classification
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Primary references
- cve@mitre.org — Patch, Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory