Professional / Community 2022.12.4

Summary: PortSwigger released Burp Suite Professional/Community 2022.12.4 on 15 December 2022, adding support for popup windows when recording logins and a new Live crawl view tab in Burp Scanner. The release also adds DOM clobbering detection to DOM Invader, changes how Burp Scanner navigates with its built-in browser, upgrades Burp's browser to Chromium 108.0.5359.124/.125, and requires Java 17 or later.
What you should know: The scanner can now replay recorded login sequences that open new windows or tabs, which the release says enables authenticated scans on sites whose login mechanisms require popup interaction, such as Microsoft and Amazon's SSO services - coverage that previously depended on whether your scanner could get past the login page at all.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026