Cyber Risks · PortSwigger Research

Professional / Community 2021.2

Summary: PortSwigger released Burp Suite Professional/Community 2021.2 on 8 February 2021, adding detection in Burp Scanner for target applications that import a JavaScript dependency with a known vulnerability, such as a dangerously out-of-date library. The release also extends non-printing character display to code points 7F to FF, makes platform authentication switchable per host, improves message inspector performance with horizontal resizing and multi-select, and upgrades the embedded browser to Chromium 88.0.4324.150.

What you should know: The scanner now flags out-of-date JavaScript libraries with known vulnerabilities, a class of exposure that often sits in third-party code a team did not write and does not track.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related