I am testing an app for CSRF vulnerability and i observed that when i generate a Cross-domain XHR POC with burp and try to exploit, a pre-flight request is getting triggered but this is is not happening in IE. I am able to exploit and perform a state change action in Internet Explorer. What is the reason for this behavior??

  • Which IE version? Aug 13, 2019 at 9:30
  • Its IE 11 (11.1268)
    – Raghav
    Aug 13, 2019 at 9:55


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.