Cyber Risks · PortSwigger Research

Professional 1.5.13

Summary: PortSwigger released Burp Suite Professional 1.5.13 on 25 June 2013 with fixes for six issues. These include an Intruder bug where repeating an attack with null payloads may generate no attack requests, a CSRF PoC generator cross-domain XHR technique that fails on current Chrome versions, and poor performance saving and restoring state in v1.5.12.

Bottom line: The CSRF PoC generator's cross-domain XHR output stopped working on current Chrome versions, so proof-of-concept exploits produced by the tool could fail silently against the browser your targets actually use.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related