Enterprise Edition 2021.3

Summary: PortSwigger released Burp Suite Enterprise Edition 2021.3 on 8 March 2021, adding a CORS option that lets users whitelist trusted origins for the GraphQL API so a third-party application's client-side JavaScript can fetch data, create and edit sites, and launch scans from the browser. The release also adds support for additional database versions, removes the AWS CloudFormation and Azure Resource Manager templates, and includes a significant number of minor improvements and bug fixes.
What's compelling: Whitelisting an origin for the GraphQL API grants that application's browser JavaScript the full functionality of the API, and by default all cross-origin requests are blocked unless an origin is explicitly added to the Allowed Origins list.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026