Cyber Risks · PortSwigger Research

Integrating Burp Suite DAST with Jira - Port Swigger

Summary: PortSwigger's documentation describes how Burp Suite DAST connects to Jira Cloud and Jira Data Center up to 10.x, with 8.4.1 as the oldest supported version, so users can raise Jira tickets directly from the scanner. The integration requires linking DAST to a specific Jira user, and because every project that user can create tickets in is exposed to DAST, PortSwigger recommends creating a dedicated Jira user for the integration.

Key Takeaway: The integration exposes every Jira project the linked user can create tickets in, so a broadly permissioned account hands Burp Suite DAST reach well beyond the projects you intended to cover.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related