Cyber Risks · PortSwigger Research

Professional / Community 2022.8

Summary: PortSwigger released Burp Suite Professional/Community 2022.8 on 25 July 2022, adding the ability to send all requests in a group of Repeater tabs sequentially with one click, over a single connection or a separate connection per request. The release also lowered the reported severity of External service interaction (DNS) issues and upgraded Burp's browser to Chromium 103.0.5060.134.

Why it matters: PortSwigger reduced that DNS issue's severity because it increasingly saw systems perform DNS lookups with no intent to connect, such as when a URL is added as a Java Map key, meaning no HTTP request ever existed - so a finding your team once treated as high severity may now reflect a different, smaller impact.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related