Detect enabled HTTP PUT method
Online Detect enabled HTTP PUT method
Short Info
Level
High
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
5 seconds
Time Interval
4 days
Scan only one
Domain, IPv4, Subdomain
Toolbox
-
The HTTP PUT method is normally used to upload data that is saved on the server at a user-supplied URL. If enabled, an attacker may be able to place arbitrary, and potentially malicious, content into the application. Depending on the server's configuration, this may lead to compromise of other users (by uploading client-executable scripts), compromise of the server (by uploading server-executable code), or other attacks.
