Cyber Risks · PortSwigger Research

Professional / Community 2023.2.3

Summary: PortSwigger released Burp Suite Professional/Community 2023.2.3 on 10 March 2023, adding improved WebSocket support to the Montoya API so extensions can interact with WebSockets more effectively, alongside minor improvements and bug fixes. The release upgrades Burp's browser to Chromium 111.0.5563.64/65, which contains a critical security fix and several high-severity fixes, and drops Burp Scanner compatibility with Windows Server 2012 and Windows 7/8/8.1.

Why it matters: The bundled Chromium upgrade carries a critical security fix, so anyone running an older Burp build is carrying that flaw in the browser they test with; the same release also leaves Burp Scanner unable to run on Windows Server 2012 and Windows 7/8/8.1.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related