PortSwigger Web Security · Report #191220

HTTP OPTION Method is Enabled on portswigger.net

N/Astatus

lowseverity

6upvotes

27 Dec 2016disclosed

How it was found

Enabled OPTION method on web server allows unauthorized blind submission of privileged GET requests.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original