Professional 1.6.38
Summary: PortSwigger released Burp Suite Professional 1.6.38 on 24 February 2016, adding the ability to report reflected DOM-based and stored DOM-based vulnerabilities. The scanner now joins the two steps it already detected separately - reflection of input and reading data from a controllable DOM location - and the capability covers all DOM-based vulnerability types Burp can report, including JavaScript injection, WebSocket hijacking and open redirection.
Why it matters: DOM-based flaws that only appear when a controllable DOM source feeds a dangerous sink were previously split across two detection steps; a scanner that connects them changes what shows up in your web application findings.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026