Professional / Community 2020.9.2
Summary: PortSwigger released Burp Suite Professional/Community 2020.9.2 on 2 October 2020, adding support for recorded login sequences in Burp Scanner so the crawler can replay a full login process from a JSON script generated by a Chrome extension. The release also fixes a security issue in the Collaborator server where an attacker able to perform an active, server-side MITM attack could obtain the contents of emails delivered using STARTTLS.
What you should know: Anyone running their own Collaborator server is advised to update, because the flaw let a positioned attacker read STARTTLS-delivered email contents - a reminder that the testing infrastructure itself carries exposure.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026