Cyber Risks · PortSwigger Research

Professional / Community 2021.6.2

Summary: PortSwigger released Burp Suite Professional/Community 2021.6.2 on 18 June 2021, restoring the message editor's hex view for displaying and editing messages in hexadecimal notation and enabling HTTP/2 for requests issued by extensions. The release also adds two makeHttpRequest methods with a forceHttp1 flag, remembers the user's task-pausing preference on startup, and updates the embedded browser to Chromium 91.0.4472.114, which fixes several issues Google classified as high.

Why it matters: The embedded browser update addresses security issues Google rated high, so anyone running an older Burp build is carrying those flaws in a tool that sits directly in front of the traffic they are testing.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related