Enterprise Edition 2021.12.1
Summary: PortSwigger audited Burp Suite Enterprise Edition and Professional/Community Edition and found neither vulnerable to the recently disclosed Log4j flaw, though the library was present in Enterprise Edition through a transitive dependency and unused. The 2021.12.1 release removes that dependency as a precaution, fixes a bug blocking Jira ticket creation from Enterprise Edition, and drops AWS CloudFormation and Azure Resource Manager templates ahead of a simpler deployment method.
What you should know: PortSwigger notes that third-party extensions may still be vulnerable and suggests disabling them while they are audited - the scanner itself is clean, but the add-ons your team has installed are not covered by that finding.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026