Consolidation of site-wide passive issues
Summary: PortSwigger Research describes a change to Burp Scanner's multi-phase scanning model that consolidates frequently occurring passive issues instead of reporting each instance separately. In the first passive phase Burp counts issues and tracks their locations, and in the second it consolidates them by frequency and location, so a scan that previously showed 310 separate Clickjacking issues now reports a single issue at the web root or a parent folder, with a sample of concrete requests and responses.
Why it matters: The consolidation is on by default and optional, so teams that want an exhaustive audit of every instance must turn it off - otherwise the 310 findings become one line and the per-location detail a security leader may expect is no longer in the results.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026