Skip to content
Threat Feed

Tag

Http-Method-Override

1 brief RSS
high advisory

FlightPHP HTTP Method Override Vulnerability Leads to CSRF and Middleware Bypass

A vulnerability in FlightPHP core versions before 3.18.1 allows attackers to override HTTP methods via the `X-HTTP-Method-Override` header or `_method` parameter, leading to CSRF escalation, middleware bypass, and cache poisoning.

flightphp/core csrf middleware-bypass cache-poisoning http-method-override
2r 1t