Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Is it possible to have different severities in issues with the same name / type ?

Xavi | Last updated: Jun 13, 2019 01:54PM UTC

Hi team. I was working on the Dradis burp add-on, I wanted to know if when parsing a burp xml file, is it possible for 2 <issue> elements with the same <name> and <type> to have a different <severity> value. Like this: <issue> <type>3145984</type> <name>Cleartext submission of password</name> <severity>High</severity> ... </issue> <issue> <type>3145984</type> <name>Cleartext submission of password</name> <severity>Medium</severity> ... </issue> I've been searching but so far I've not been able to find an example. Thanks!

PortSwigger Agent | Last updated: Jun 13, 2019 01:56PM UTC

Yes, this can happen, there are a number of instances. For example, ASP Tracing Enabled is low for page level tracing and high for app level tracing. Also, users can override severity, and they may do this for individual instances.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.