Professional / Community 2024.9.3

Summary: PortSwigger released Burp Suite Professional/Community 2024.9.3 on 24 October 2024, adding a redesigned Burp Intruder side panel for editing payload positions, payloads, and attack settings, Bambda-based HTTP match and replace rules, and SOAP API scanning in Burp Scanner. The release also updated Java from 21.0.4 to 22.0.2 and upgraded Burp's built-in browser to Chromium 130, while noting that the browser remains unusable on Amazon Linux 2 since the Chromium 127 upgrade in version 2024.6.4.
What you should know: The Bambda match and replace rules and SOAP scanning are limited to Burp Suite Professional, so teams on Community builds do not get the broader web service coverage. PortSwigger advises against running scans on Amazon Linux 2 with version 2024.6.4 or later, which leaves anyone on that OS without a working built-in browser.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026