Cyber Risks · PortSwigger Research

Potential Vulnerability Indicator

Summary: PortSwigger's BApp Store lists a third-party Burp extension called Potential Vulnerability Indicator, authored by CodeWatchOrg at version 0.3.10 and last updated 05 January 2023. The listing states the extension runs checks only on items in scope and carries an overall estimated system impact of Low, with PortSwigger making no warranty about third-party extensions' quality or usefulness.

Why it matters: The extension has not been updated since 05 January 2023, and PortSwigger explicitly disclaims any warranty on third-party BApps - so any team running it inside Burp is relying on code the vendor will not vouch for.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related