Professional / Community 2023.3
Summary: PortSwigger released Burp Suite Professional / Community 2023.3 on 10 March 2023, adding support for Collaborator payloads in Intruder attacks so that resulting interactions appear in the Intruder results window rather than the Collaborator tab. The release also updated the Montoya API for WebSockets, improved Burp Scanner's form submission handling for future single-page application work, fixed a DOM Invader bug involving CSP and prototype pollution, and upgraded Burp's browser to Chromium 111.0.5563.64/.65 and the installer JRE to 19.0.2.
What you should know: The DOM Invader fix addresses a case where disabling CSP with prototype pollution enabled left the system ignoring CSP security headers even after prototype pollution was turned off - a gap that matters to anyone relying on that tooling during client-side testing.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026