Professional / Community 1.6.30
Summary: PortSwigger released Burp Suite Professional / Community 1.6.30 on Tuesday, 20 October 2015 at 15:41 UTC, fixing a bug introduced in 1.6.29 in how session handling rules handle cookies. When a session handling rule tried to update the values of multiple cookies within a single request, the bug caused the operation to fail in some situations, and the request could be made out of session.
What you should know: A scanner request sent out of session can mean authenticated testing silently runs unauthenticated, so results from any Burp version between 1.6.29 and this fix may not reflect what you think was tested.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026