CSRF Scanner
Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension called CSRF Scanner, authored by Adrian Hayter at version 1.4a, that passively checks for cross-site request forgery vulnerabilities as part of normal passive scanning. The listing was last updated on 04 February 2022, rates its overall system impact as low, and states that PortSwigger makes no warranty about third-party extensions' quality or usefulness.
Key Takeaway: The tool that would catch CSRF flaws in your web estate is a third-party add-on last updated in February 2022, carrying an explicit no-warranty disclaimer from the vendor - so the coverage decision and its upkeep sit with your team, not PortSwigger.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026