Cyber Risks · PortSwigger Research

Professional / Community 2024.7.5

Summary: PortSwigger released Burp Suite Professional/Community 2024.7.5 on 30 August 2024, adding performance upgrades for large responses and Repeater-heavy project files, a reworked Intercept feature that lists messages in send order with bulk edit, forward, and drop, and a Scanned insertion points column in the Audit items table. The release also extends OpenAPI scanning to endpoints requiring HTTP headers, adds a Site map toggle between URL and Crawl paths views, and fixes bugs including slow parsing of deeply nested OpenAPI schemas and Boolean parameters not being populated during scans.

Why it matters: The release fixes a bug that reported CSP headers with sandbox directive values as malformed, so scan results your team may have triaged on that basis deserve a second look.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related