Cyber Risks · PortSwigger Research

Professional / Community 2022.12.1

Summary: PortSwigger released Burp Suite Professional and Community 2022.12.1 as an early adopter build on Thursday, 1 December 2022 at 14:30 UTC. The release upgrades Burp's embedded browser to Chromium 108.0.5359.71, which the release notes say fixes a number of high-severity security issues.

Bottom line: The bundled browser in a pentesting toolkit is itself attack surface, and this build ships fixes for multiple high-severity Chromium flaws - so testers running older Burp versions are carrying those unpatched issues on their own machines.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related