Learn
active
IETF Publishes HTTP QUERY Method (RFC 10008): First New Verb Since PATCH
- Engineer — Learn: The new QUERY method sits between GET and POST semantics, meaning existing WAF rules, reverse proxies, and security controls may handle it inconsistently or not at all — worth understanding before adopting it in APIs or encountering it in the wild.
- SOC/IR — Learn: A new HTTP verb with ambiguous semantics may appear in traffic without triggering existing method-based detection rules; no active exploitation context, but analysts should know to expect it in logs and WAF telemetry.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.