Professional / Community 2022.2.3

Summary: PortSwigger released Burp Suite Professional/Community 2022.2.3 on 11 March 2022, adding a Fastest crawl strategy optimized for static sites that cuts crawl time on its static documentation site from around 45 minutes to well under 10 minutes, plus enhanced scanning of single-page applications built on frameworks like React. The release also adds mitigation preventing BApps from introducing an HTML injection vulnerability that could cause Burp Suite to send requests ignoring its upstream proxy configuration and leak NetNTLM hashes on Windows systems that failed to block outbound SMB, and upgrades Burp's browser to Chromium 99.0.4844.51.
Key Takeaway: The proxy-bypass flaw could leak NetNTLM hashes on Windows systems that fail to block outbound SMB, so any team running Burp Suite against internal targets should confirm it is on this build and that outbound SMB is blocked at the network edge.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026