Professional / Community 2020.5.1
Summary: PortSwigger released Burp Suite Professional/Community 2020.5.1 on 19 June 2020, delivering several bug fixes that include improvements to the HTTP message editor. The release also fixes a security bug reported through the company's bug bounty program, in which an attacker could potentially read local files if a user was induced to visit a malicious website, copy the request as a curl command, and execute it from the command line.
Key Takeaway: The flaw was rated medium severity only because it required significant user interaction, meaning the exposure depended on a user pasting and running an attacker-supplied curl command rather than on a remote exploit alone.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026