Web Help Desk
CVE-2021-35243: HTTP PUT & DELETE Methods Enabled
The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Web Help Desk 12.7 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the origin server removes the association between the target resource and its current functionality. Improper use of these methods may lead to a loss of integrity.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.