Professional / Community 2023.11.1
Summary: PortSwigger released Burp Suite Professional / Community 2023.11.1 on 14 November 2023, adding manual testing tools for GraphQL APIs, syntax highlighting in the BChecks editor, and an experimental scan check for broken access control. The GraphQL features add a GraphQL tab to the message editor when a request is detected, let users generate and send an introspection query in a few clicks, and save introspection results to the site map; the access control check is disabled at Normal audit accuracy and requires selecting Minimize false negatives.
What's compelling: The broken access control check ships experimental and off by default at Normal accuracy because of its false positive rate, so teams relying on default scan settings will not see what it finds until they change their audit configuration.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026