CVE-2020-35774 in TwitterServerinfo

Summary

by MITRE • 12/30/2020

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Disclosure

12/30/2020

Moderation

accepted

CPE

ready

EPSS

0.87622

KEV

no

Activities

very low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!