CVE-2018-10377

MEDIUM 5.9CVE-2018-10377 · Published 17/06/2018 · updated 17/06/2026

In short

CVE-2018-10377 is a MEDIUM (CVSS 5.9) vulnerability affecting burp suite (portswigger).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.7% of all vulnerabilities.
Fix: update to 1.7.34 or later.

Package	Affected versions	Patched versions
burp suite portswigger	`< 1.7.34`	`1.7.34`

Description

PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.

References

releases.portswigger.net/2018/06/1734.html · Vendor Advisory
hackerone.com/reports/337680 · Third Party Advisory
integritylabs.io/advisories/cve-2018-10377 · Third Party Advisory

More vulnerabilities in burp suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

burp suite

portswigger

< 1.7.34

1.7.34

More vulnerabilities in burp suite

See all →