Professional / Community 2024.2.1.3
Summary: PortSwigger released Burp Suite Professional/Community 2024.2.1.3 on 2 April 2024, adding API scanning that lets users upload an OpenAPI v3.0.x definition from a local file to seed a scan, plus Bambdas support in the Logger capture filter. The release also adds passive scan checks for Content Security Policy issues such as unsafe script permissions, clickjacking, form hijacking and incorrect CSP syntax, and raises the minimum supported Java version from 17 to 21.
What you should know: The new CSP checks flag unsafe script permissions, clickjacking and form hijacking in scanned applications, giving security teams a way to surface these client-side weaknesses before they are exploited.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026