Professional 1.5.03

Summary: PortSwigger released Burp Suite Professional 1.5.03 on Thursday, 20 December 2012, a maintenance release fixing several bugs in the toolkit's new extensibility. The fixes include automatic reloading of extensions on startup in headless mode, a v1.5.02 bug that blocked new Python extensions unless the JRuby JAR was configured, an exception when adding custom scan issues asynchronously via IBurpExtenderCallbacks.addScanIssue(), and a bug that reported all custom scan issues as High severity in the UI.
Key Takeaway: The severity-reporting bug meant every custom scan issue an extension raised showed up as High in the UI, so teams triaging findings from their own extensions were working from inflated ratings until this release.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026