🎯 New Report #3972558: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB authentication
🔺Severity: Medium
👽 Reporter: gankd
⭐️ Reputation: 1372
🛠 State: resolved
💼 Team: PortSwigger Web Security
💵 Bounty: 1000
🕐 Submitted: 2026-08-27
⏰ Disclosed: 2026-10-15 14:08:30
📝 Summary: A vulnerability was discovered in Burp Suite where attacker-controlled text from an OpenAPI parser exception was inserted into the Event log HTML without proper encoding. When a user invoked a specific save function and selected the resulting Event log entry, malicious HTML tags were interpreted by the HTML editor. On Windows systems, this allowed the execution of file URL requests that triggered SMB authentication to attacker-controlled endpoints. The vulnerability required user interaction including two specific UI actions to be exploited.
📂 Report JSON File: 3972558
@hackeronereports