CVE-2018-1153: Portswigger Burp Suite

High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic.

Affected products

• Portswigger Burp Suite: version 1.7.32 only; version 1.7.33 only

Published 2018-06-18. Last modified 2026-06-17.