Cyber Risks · PortSwigger Research

Professional / Community 2022.7.1

Summary: PortSwigger released Burp Suite Professional/Community 2022.7.1 on 22 July 2022, adding tab-specific options in Repeater and client-side prototype pollution detection in Burp Scanner. The release also changes Burp's browser to respect the configured User-Agent header during scanning instead of generating a random string, upgrades the embedded browser to Chromium 103.0.5060.134, and includes a minor bug fix.

What you should know: Client-side prototype pollution now has a dedicated scanner check and issue definition, so findings that previously depended on manual review can surface in automated scans. The User-Agent change also means scan traffic now carries the configured header rather than a randomized one, which affects how that traffic is identified in logs and filtering.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related