Professional / Community 1.6.25
Summary: Burp Suite's 21 August 2015 release added a scan check for external service interaction and out-of-band resource load through injected XML stylesheet tags. The scanner sends payloads and reports an issue based on any DNS or HTTP interactions observed reaching the Burp Collaborator server, and the release also fixes some issues.
Bottom line: The check works by detecting out-of-band callbacks to a Collaborator server, so an injected stylesheet that makes a target reach outward can be caught even when nothing shows up in the immediate response.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026