CVE-2020-35774

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer aka twitter-server before 20.12.0, in some configurations, allows XSS via the /histograms endpoint...

CVE-2020-35774

creationtimestamp| type| source ---|---|--- 2024-09-16 16:08:19+00:00| seen| https://t.me/CyberSecurityTechnologies/2466...

CVE-2020-35774

Twitter TwitterServer (twitter-server) prior to version 20.12.0 is vulnerable to cross-site scripting via the /histograms endpoint, in configurations using HistogramQueryHandler.scala. The issue arises in the histograms component of the administration panel and could allow an attacker to inject m...