Detect enabled HTTP PUT method
An attacker can gain access to the application using HTTP PUT method.
Short Info
Level
High
Type
Single Scan
Can be used by
Asset Owner
Estimated Time
5 sec
Scan only one
Domain, Ipv4
Parent Category
Detect enabled HTTP PUT method Detail
The HTTP PUT method is normally used to upload data that is saved on the server at a user-supplied URL. If enabled, an attacker may be able to place arbitrary, and potentially malicious, content into the application. Depending on the server's configuration, this may lead to compromise of other users (by uploading client-executable scripts), compromise of the server (by uploading server-executable code), or other attacks.
Try it yourself,
control security posture
control security posture