Vulnerability Fixation
How to Disable HTTP PUT Method

How to Disable HTTP PUT Method

The HTTP PUT method allows a client to upload or replace a resource on a server at a specific URL. If the resource exists, PUT updates it; if not, it can be created at the requested location. The client usually provides data along with headers like Content-Type and Content-Length to define the uploaded content.

Although useful for controlled file management, enabling PUT without proper security can allow unauthorized users to upload harmful files, potentially leading to data compromise or server takeover.

Verification of vulnerability:

If HTTP PUT request gives response as "201 Create" then file in PUT request was successfully created on specified URI.

If HTTP PUT request gives response as "200 OK" then file in PUT request was successfully modified on specified URI if it was in accordance with the file type present on server.