Cyber Risks · PortSwigger Research

Professional / Community 2023.9.2

Summary: PortSwigger released Burp Suite Professional/Community 2023.9.2 on 17 August 2023, upgrading Burp's built-in browser to Chromium 116.0.5845.96 on Mac and Linux and 116.0.5845.96/.97 on Windows. The release also fixes a bug in Burp Scanner where the crawler would stop enumerating potential GraphQL endpoints for some responses.

What you should know: A crawler that silently stops enumerating GraphQL endpoints means scan coverage gaps that look like clean results, so teams relying on Burp Scanner for API testing should confirm they are on this build before trusting a GraphQL assessment.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related