Professional / Community 2020.11

Summary: PortSwigger released Burp Suite 2020.11 on 9 November 2020, adding a collapsible message inspector panel on the right of the message editor and removing the Hex, Params, Headers, and Cookies tabs. The release also lets Burp Scanner parse JSON and YAML API definitions to find endpoints to crawl and audit, adds replay of recorded login sequences in an embedded browser, and turns on automatic updates by default.
Why it matters: The API scanning is explicitly limited at launch, supporting only a fairly limited range of REST APIs, so teams pointing it at their API estate should not read a clean scan as full coverage. The automatic-update change also means Burp can no longer be installed in a directory requiring admin privileges, so Windows installs of 2020.11 will likely create a new instance and require manually uninstalling the old version.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026