Cyber Risks · PortSwigger Research

Professional 1.7.08

Summary: PortSwigger released Burp Suite Professional 1.7.08 on 14 October 2016, considerably enhancing Burp Scanner's logic for reporting cross-origin resource sharing (CORS) issues. The release introduces three new issues and incorporates research from a blog post published the same day on CORS configuration subtleties.

Key Takeaway: The vendor states that CORS misconfigurations are not widely understood yet can lead to catastrophic vulnerabilities, which means the scanner's findings on this class of issue deserve review rather than routine triage.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related