View Attack Vector

General Information

HTTP PUT Method Abuse

Variants:
Direct

Vector Type:
Attack

Relevance:
Generic

Layer:
Web-Infrastructure-Level

Platforms:
Any

Target Type:
Web Application

Affected Mechanisms:
Web Server Configuration

Invented In:
01/01/1999

Added In:
17/12/2014

Vector Operation Method:
Abuse the HTTP PUT method to upload malicious content to the website, replace existing content or deface the website

Direct Variant:

HTTP PUT Attack

Variant Title:
HTTP PUT Attack

Typical Severity:
Critical

Resources:

CWE

White Papers:

Learn More: