Code Execution via WebDAV

Severity: Critical

Summary#

Invicti identified that code execution via WebDAV. Invicti successfully uploaded a file via PUT method and then renamed this file via MOVE method. When requesting the file, code is executed in the context of the web server. At the end of the attack, Invicti tried to delete the file.

Impact#

An attacker can execute malicious code by abusing the Code Execution via WebDAV vulnerability on the server.

Remediation#

Remove write permissions from this directory or disable WebDAV if it's not being used.

Required Skills for Successful Exploitation#

This vulnerability is not difficult to leverage. Successful exploitation requires knowledge of the programming language, access to or the ability to produce source code for use in such attacks, and minimal attack skills.

Classifications#

CAPEC-17, ISO27001-A.14.2.5, OWASP 2017-A6, PCI v3.2-6.5.8, HIPAA-164.306(a), 164.308(a), WASC-17, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, CWE-94

Invicti Security Insights

Why Framework Choice Matters in Web Application Security

Select Category

Search Vulnerability

Code Execution via WebDAV

Related Articles

Build your resistance to threats. And save hundreds of hours each month.