CVE-2022-35406: Portswigger Burp Suite

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.

Affected products

• Portswigger Burp Suite: before 2022.6 (fixed in 2022.6)

Published 2022-07-08. Last modified 2026-06-17.