Code Execution via WebDAV
Severity:
Critical
Summary
Invicti identified that code execution via WebDAV. Invicti successfully uploaded a file via PUT method and then renamed this file via MOVE method. When requesting the file, code is executed in the context of the web server. At the end of the attack, Invicti tried to delete the file.
Impact
An attacker can execute malicious code by abusing the Code Execution via WebDAV vulnerability on the server.
Remediation
Remove write permissions from this directory or disable WebDAV if it's not being used.
Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Build your resistance to threats. And save hundreds of hours each month.
