HexBrain

Kartpay · Report #642862

Option method enabled in kartpay Webservers

Validstatus
lowseverity
2upvotes
28 Aug 2019disclosed

How it was found

HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the web server, it represents a request for information about the communication options available on the request/response chain identified by the Request-URI.

Domain : merchant.kartpay.com

Impact

The issue was not critical, as the impact of using other methods than GET and POST in this domain is nearly nonexistent. The bounty reflects the criticality of the issue.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original