CVE-2018-1153 describes a critical vulnerability in Burp Suite Community Edition versions 1.7.32 and 1.7.33, where the software fails to properly validate server certificates for certain HTTPS requests. This flaw enables a man-in-the-middle attacker to intercept, view, or modify sensitive traffic. With a CVSS score of 7.4 (High), the vulnerability is network-exploitable with high impact on confidentiality and integrity, though it requires high attack complexity. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.7.32CPE matchmatch criteria | cpe:2.3:a:portswigger:burp_suite:1.7.32:*:*:*:community:*:*:* | ||
1.7.33CPE matchmatch criteria | cpe:2.3:a:portswigger:burp_suite:1.7.33:*:*:*:community:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
[R1] Burp Suite Community Edition Improper Certificate Validation
Jun 15, 2018[R1] Burp Suite Community Edition Improper Certificate Validation
Jun 15, 2018Burp Suite Community Edition Improper Certificate Validation
Jun 15, 2018