Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Post Reflected XSS

Karim | Last updated: Jul 28, 2021 09:07PM UTC

Hi, I'm able to modify a parameter in POST request (Using Burp Suite Repeater) and gets the alert in the browser when I "show response in browser". That means there is an issue with the input validation. When I tried to build HTML forum to create the POST request, I found that, the server checks the referer value and rejects the request if the referer is not correct (Also, it has CSP defined). I cannot modify the referer value, hence, it is not possible to generate POC. Basically, I can do the POC only using Burpsuite but not through real world scenario ( HTML form). Is this still considered vulnerability, given that, I don't have full POC? Any idea how to generate valid POC? Thanks

Karim | Last updated: Jul 29, 2021 11:08AM UTC