Professional / Community 2024.7.2
Summary: PortSwigger released Burp Suite Professional and Community version 2024.7.2 on 7 August 2024 at 21:00 UTC, updating the default Intruder payload list to include email splitting attacks. The release points to the white paper "Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls" by Gareth Heyes of PortSwigger Research for detail on email parsing discrepancies and how they can be exploited.
What's compelling: Email parsing discrepancies are now a default payload in a widely used scanner, which means access-control bypasses built on how systems disagree about an email address are practical enough to ship as standard test input.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026