EPSS
Percentile
32.1%
PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.
releases.portswigger.net/2018/06/1734.html
hackerone.com/reports/337680
integritylabs.io/advisories/cve-2018-10377