Cyber Risks · PortSwigger Research

Professional / Community 2024.4.2

Summary: PortSwigger released Burp Suite Professional/Community 2024.4.2 on 8 May 2024, fixing a bug where Burp did not apply its own network settings when fetching URLs in the API scan launcher. The fix means API definitions can now be uploaded from URLs that require specific network configurations, such as self-signed certificates or an upstream proxy.

What's compelling: Teams that scan APIs behind a proxy or self-signed certificate were blocked from uploading definitions through the API scan launcher until this patch, leaving those APIs outside automated scanning.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related