Option method enabled in kartpay Webservers

Disclosed: 2019-08-28 15:31:29 By lollol1 To kartpay
Low
Vulnerability Details
HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the web server, it represents a request for information about the communication options available on the request/response chain identified by the Request-URI. Domain : merchant.kartpay.com ## Impact The issue was not critical, as the impact of using other methods than GET and POST in this domain is nearly nonexistent. The bounty reflects the criticality of the issue.
Actions
View on HackerOne
Report Stats
  • Report ID: 642862
  • State: Closed
  • Substate: resolved
  • Upvotes: 2
Share this report