CVE-2020-35774

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms…

published December 29, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
86%
Percentile
99.7
In the wild
Unconfirmed
What it is

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.85649 · 99.7th percentile
Published
2020-12-29T17:54Z
EPSS history
Timeline
  • 29 DEC 17:54Z
    server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms…
    cvelistv5