Portswigger Burp Suite
5 CVEs affecting Portswigger Burp Suite. Latest disclosed: 2022-07-08. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1153 | High | 7.4 | 2018-06-18 | Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify… |
CVE-2021-44230 | Medium | 6.5 | 2021-11-30 | PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows has weak file permissions for the embedded H2 database, which might lead to privilege escal… |
CVE-2021-29416 | Medium | 6.5 | 2021-03-29 | An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does… |
CVE-2018-10377 | Medium | 5.9 | 2018-06-17 | PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers… |
CVE-2022-35406 | Medium | 4.3 | 2022-07-08 | A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interp… |