Professional 1.4beta3

Summary: PortSwigger released Burp Suite Professional 1.4beta3 on 26 May 2011, fixing several bugs and extending the session handling features added in v1.4. The release adds a session handling tracer for troubleshooting configuration, a post-request macro action that can update parameters from the current response to handle anti-CSRF tokens, and URL-encoding of updated parameter values, with the site map comparison wizard now displaying the new map while it is being re-requested.
What you should know: The post-request macro action is aimed at testing requests partway through a multi-stage process, so bugs like XSS and SQL injection where input supplied at one stage is processed at a later stage can be identified.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026