Portswigger: >> Burp Suite >> 2020.11.2 Security Vulnerabilities
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.
CVSS Score
4.3
EPSS Score
0.005
Published
2022-07-08
An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB.
CVSS Score
6.5
EPSS Score
0.003
Published
2021-03-29