Cyber Risks · PortSwigger Research

Raising Jira tickets manually - Port Swigger

Summary: PortSwigger's documentation describes how Burp Suite DAST users with an admin-configured Jira integration can raise Jira tickets directly from scan results using the Raise Jira Ticket button, which adds a ticket with a link to the issue to the Jira project backlog. The ticket does not automatically include the issue's HTTP requests and responses, so if the assigned developer lacks a Burp Suite DAST account, the HTML report must be downloaded and attached manually.

Key Takeaway: The vulnerability evidence a developer needs to act on a finding does not travel with the ticket by default, so remediation can stall unless someone manually attaches the report or the developer already holds a Burp Suite DAST account.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related