Cyber Risks · PortSwigger Research

Professional / Community 2022.9.1

Summary: PortSwigger released Burp Suite Professional and Community 2022.9.1 on 16 September 2022, upgrading Burp's browser to Chromium 105.0.5195.125 to patch a number of high-severity security issues. The release also fixed minor bugs, including that disabling the Collaborator did not stop the Collaborator client from generating payloads or polling for already-created payloads, plus Montoya API issues affecting extension output performance, the Param Miner BApp's brute force requests, and Site Map navigation speed.

Key Takeaway: The headline fix is a browser engine upgrade patching high-severity Chromium flaws - the same browser your testers use to reach production and internal applications, so a lagging pentest toolkit carries the exposure it is meant to find.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related