Cyber Risks · PortSwigger Research

Professional 2.1.03

Summary: PortSwigger released Burp Suite Professional 2.1.03 on Wednesday, 7 August 2019, adding a new scan check for HTTP request smuggling vulnerabilities. The release notes describe request smuggling as a long-overlooked vulnerability class that is prevalent in modern cloud architectures and often has a critical impact.

What's compelling: Request smuggling sits in the request-handling layer of cloud architectures, where a single desync between front-end and back-end systems can expose traffic that individual application controls never inspect.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related