Cyber Risks · PortSwigger Research

Professional / Community 2023.4.4

Summary: PortSwigger released Burp Suite Professional and Community 2023.4.4 on Friday, 19 May 2023, upgrading Burp's embedded browser to Chromium 113.0.5672.126 on Mac and Linux and 113.0.5672.126/.127 on Windows. The release notes state this contains a critical security patch and point to the Chromium release notes for details.

Bottom line: The bundled browser in a pentesting toolkit is itself an attack surface, and this update carries a critical Chromium patch - testers running an older Burp build are carrying that unpatched browser into every engagement.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related