General Information

HTTP DELETE Method Abuse

Variants:
Direct 

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Web Application

Affected Mechanisms:
Web Server Configuration

Invented In:
01/01/1999

Added In:
17/12/2014


Vector Operation Method:
Abuse the HTTP DELETE method to delete existing content on the server, causing denial of service, data loss or defacement.


Direct Variant:

HTTP DELETE Attack

Variant Title:
HTTP DELETE Attack

Typical Severity:
Major

Resources:

White Papers:

Learn More: