Professional / Community 1.7.17
Summary: PortSwigger released Burp Suite Professional/Community 1.7.17 on 1 February 2017, adding a new Scanner check for suspicious input transformation that reports reflected and stored input transformed by the application. The release also maps Burp Scanner issues to CWE vulnerabilities, adds enhancements to Burp Infiltrator based on real-world usage, and adds a command-line option to stop the Spider and Scanner from pausing when existing projects are reopened.
What's compelling: The new check targets a specific bypass: if input is decoded after filters are applied, an attacker can encode payloads to get past them, or end input with the start of a multi-character encoding sequence so the transformation consumes the following concatenated data.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026