Cyber Risks · PortSwigger Research

Professional / Community 2021.5

Summary: PortSwigger released Burp Suite Professional/Community 2021.5 on 29 April 2021, adding the ability to save Intruder attacks to project files on an opt-in basis so attacks can be resumed or their results reviewed later. The release also updated the embedded browser to Chromium 90.0.4430.93 to fix several security issues Google classified as high, and added an optional TTL value for custom DNS records in Burp Collaborator.

Bottom line: The embedded browser update addresses several issues Google rated high, so anyone running an older Burp build is carrying known browser vulnerabilities inside their testing tool.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related