Kartpay · Report #642862
Option method enabled in kartpay Webservers
Validstatus
lowseverity
2upvotes
28 Aug 2019disclosed
How it was found
HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the web server, it represents a request for information about the communication options available on the request/response chain identified by the Request-URI.
Domain : merchant.kartpay.com
Impact
The issue was not critical, as the impact of using other methods than GET and POST in this domain is nearly nonexistent. The bounty reflects the criticality of the issue.