Cyber Risks · PortSwigger Research

Same Origin Method Execution

Summary: PortSwigger lists a Burp extension by Nathan Walsh, version 0.0.1 and last updated 26 January 2017, that monitors HTTP requests and responses to determine if a webpage is vulnerable to same origin method execution. The listing states an estimated overall system impact of Low and notes that extensions are written by third-party Burp users, with PortSwigger making no warranty about their quality or usefulness.

Bottom line: The tooling offered here to find same origin method execution flaws is a third-party extension at version 0.0.1, last touched in January 2017, and its vendor explicitly disclaims any warranty - so any coverage it gives you rests on code nobody has vouched for.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related