Issue details - Port Swigger
Summary: PortSwigger's documentation describes the Issues window in Burp Suite, where viewing an issue's details opens tabs that vary by issue type, with the Advisory tab always present. For DOM-based vulnerabilities, a Dynamic analysis tab shows results from an embedded headless browser that loads HTTP responses, injects payloads into the DOM at attacker-controllable locations, executes the JavaScript, creates mouse events for code coverage, and monitors dangerous sinks, generating a proof of concept where possible.
Why it matters: The Timeline tab, which records an issue's full history including status changes, re-tests, comments, integrations, and AI investigation, exists only on an issue record and not on an issue viewed from a scan, which is a snapshot without a timeline.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026