Lucene search
GoogleOSV:GHSA-3MQV-8GXG-PFM4HistoryFeb 09, 2022 - 10:37 p.m.
TwitterServer Cross-site Scripting via /histograms endpoint
2022-02-0922:37:28
Google
osv.dev
9
twitterserver
cross-site scripting
histogramqueryhandler
twitter
software
security risk
EPSS
0.969
Percentile
99.7%
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.
Related
prion
prion
Design/Logic Flaw
2020-12-29 18:15:00
github
github
TwitterServer Cross-site Scripting via /histograms endpoint
2022-02-09 22:37:28
cvelist
cvelist
CVE-2020-35774
2020-12-29 17:54:04
nvd
nvd
CVE-2020-35774
2020-12-29 18:15:13
cve
cve
CVE-2020-35774
2020-12-29 18:15:13
nuclei
nuclei
twitter-server Cross-Site Scripting
2021-07-27 03:31:48
osv
osv
CVE-2020-35774
2020-12-29 18:15:13