Skip to content

HTTP OPTIONS Method Enabled #108

@zisanyavuz

Description

@zisanyavuz

A medium severity infra vulnerability has been discovered.

Infra Group: test2,test79 - test

Scanner Name: rapid7infra

Target: 172.67.159.157 : 443

Service: HTTPS

Exploitable: false

Protocol: tcp


Proof: OPTIONS method returned values including itself

Tool Description: Web servers that respond to the OPTIONS HTTP method expose what other methods are supported by the web server, allowing attackers to narrow and intensify their efforts..
CVSS2 score: 2.600000
Service Name:
Port:
Protocol:
Proof:

Kondukto Link: https://9a4f-104-155-30-65.ngrok-free.app/projects/6703db4e0fadccdc7e5dfc4c/vulns/infra?page=1&perPage=15&id=in:672b220838ffea64c1f7a55d
Deeplink: https://10.20.104.26:3780//vulnerability/vuln-summary.jsp?vulnid=http-options-method-enabled

Metadata

Metadata

Assignees

Labels

KONDUKTObugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions