burp-headless

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Burp Enterprise/Pro runtime workflow consumes scan targets and retrieves scan “issues as JSON” via the Enterprise/Pro REST APIs (CI script polls /api/scans/$SCAN_ID/issues and parses the returned JSON), which can include outsider-authored free text if an outsider can influence the scanned content or inputs.