Cyber Risks · PortSwigger Research

Professional 1.2.07

Summary: PortSwigger released Burp Scanner version 1.2.07 on 23 April 2009, adding the ability for users to modify the severity and confidence levels of scanner issues. The update also lets users mark issues as false positives or delete them, with deleted issues reappearing if Burp rediscovers them on a rescan while false-positive-marked issues do not.

What's compelling: The distinction matters operationally: deleting an issue only cleans the Results tree, so a rescan of the same request will report it again, while the false positive flag suppresses rediscovery for issues inside functionality still under review.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related