CSRF Token Tracker
Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension called CSRF Token Tracker, version 1.1, authored by Teruhiro Tagomori of NRI SecureTechnologies, which provides a sync function for CSRF token parameters and requires Java 7. The listing shows it was last updated on 14 February 2017 and rates its overall system impact as Low, with PortSwigger stating it makes no warranty about the quality or usefulness of third-party extensions.
What you should know: The tooling many teams rely on to keep CSRF tokens synchronized across requests is a third-party extension last updated in 2017, and its own distributor disclaims any warranty on its quality or fitness.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026