Cyber Risks · PortSwigger Research

Professional / Community 2023.3.2

Summary: PortSwigger released Burp Suite Professional/Community 2023.3.2 on 6 April 2023, adding support for Collaborator payloads in Intruder attacks and showing resulting Collaborator interactions in the Intruder results window rather than the Collaborator tab. The release also includes SPA scanning improvements, continued Montoya API updates including WebSocket support, a DOM Invader fix for a CSP/prototype pollution bug, and upgrades to Chromium 112.0.5615.49 and JRE 19.0.2.

Key Takeaway: The release upgrades the bundled JRE to 19.0.2, which PortSwigger states gives several security and performance benefits - a reminder that the tooling security teams run carries its own patch debt.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related