Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Post Reflected XSS

Karim | Last updated: Jul 28, 2021 09:07PM UTC

Hi, I'm able to modify a parameter in POST request (Using Burp Suite Repeater) and gets the alert in the browser when I "show response in browser". That means there is an issue with the input validation. When I tried to build HTML forum to create the POST request, I found that, the server checks the referer value and rejects the request if the referer is not correct (Also, it has CSP defined). I cannot modify the referer value, hence, it is not possible to generate POC. Basically, I can do the POC only using Burpsuite but not through real world scenario ( HTML form). Is this still considered vulnerability, given that, I don't have full POC? Any idea how to generate valid POC? Thanks

Karim | Last updated: Jul 29, 2021 11:08AM UTC

Note: Changing the method to Get doesn't work

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.