Description

WebDAV is an extension to the HTTP protocol. It allows authorized users to remotely add and change content on your web server.

Remediation

If you are not using this extension, it's recommended to be disabled.

References

WebDav | HackTricks

Webdav Vulnerability | OWASP Top 10 Security Testing | Web App Security ...

Related Vulnerabilities

Oracle PeopleSoft SSO weak secret key

Web Cache Poisoning via Fat GET Request

Nonce Usage Detected in Content Security Policy (CSP) Directive

GraphQL Non-JSON Mutations over GET: Potential CSRF Vulnerability

PHP errors enabled

Severity

Info

Classification

CWE-16 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Configuration