Enterprise Edition 2024.1.1
Summary: PortSwigger released Burp Suite Enterprise Edition 2024.1.1 on 2 February 2024, upgrading Burp Scanner to version 2023.12.1.3 with an experimental new scan check for broken access control vulnerabilities. The check is disabled at Normal audit accuracy while false positives are reduced, and can be enabled via Audit optimization > Audit accuracy by selecting Minimize false negatives; the release also moves the scanning browser to Chromium 121.0.6167.85.
What you should know: Broken access control is the class of flaw that lets one user reach another user's data, and the vendor's own caution - keeping the check off by default until false positives come down - means teams relying on default settings are not yet scanning for it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026