CVE-2018-10377

5.9 mediumEPSS 0.9%

PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2018-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

portswigger:burp_suite

References

http://releases.portswigger.net/2018/06/1734.html
https://hackerone.com/reports/337680
https://integritylabs.io/advisories/cve-2018-10377
http://releases.portswigger.net/2018/06/1734.html
https://hackerone.com/reports/337680

Check your stack JSON