twitter-server Cross-Site Scripting

twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala. id: CVE-2020-35774 info: name: twitter-server Cross-Site...

twitter-server Cross-Site Scripting Detection

twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala. !/usr/bin/env python3 -- coding: utf-8 -- """twitter-serve...

com.github.kovszilard:twitter-server-prometheus_2.12 (19.5.1), com.jakehschwartz:finatra-swagger_2.12 (19.5.1) +80 more potentially affected by CVE-2020-35774 via com.twitter:twitter-server_2.12 (19.5.1)

com.twitter:twitter-server2.12 MAVEN version 19.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.twitter:twitter-server2.12 and may be impacted: - com.github.kovszilard:twitter-server-prometheus2.12 19.5.1 - com.jakehschwartz:finatra-swagger2.12...

com.github.giiita:scaladia-http_2.12 (>=0.0.1, <=0.0.6), com.github.giiita:scaladia_2.12 (>=1.4.0, <=1.6.4) +43 more potentially affected by CVE-2020-35774 via com.twitter:twitter-server_2.12 (18.4.0)

com.twitter:twitter-server2.12 MAVEN version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.twitter:twitter-server2.12 and may be impacted: - com.github.giiita:scaladia-http2.12 =0.0.1, =1.4.0, =18.4.0, =1.4.1, =1.4.0-rc1, =1.4.1, =1.4.1,...

com.jakehschwartz:finatra-swagger_2.12 (>=19.4.0, <=19.4.3), com.softwaremill.sttp.tapir:tapir-finatra-server_2.12 (>=0.12.0, <=0.12.1) +15 more potentially affected by CVE-2020-35774 via com.twitter:twitter-server_2.12 (19.4.0)

com.twitter:twitter-server2.12 MAVEN version 19.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.twitter:twitter-server2.12 and may be impacted: - com.jakehschwartz:finatra-swagger2.12 =19.4.0, =0.12.0, =0.11.6, =0.11.11 -...

com.github.kovszilard:twitter-server-prometheus_2.12 (19.8.0), com.jakehschwartz:finatra-swagger_2.12 (19.8.0) +14 more potentially affected by CVE-2020-35774 via com.twitter:twitter-server_2.12 (19.8.0)

com.twitter:twitter-server2.12 MAVEN version 19.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.twitter:twitter-server2.12 and may be impacted: - com.github.kovszilard:twitter-server-prometheus2.12 19.8.0 - com.jakehschwartz:finatra-swagger2.12...

com.github.kovszilard:twitter-server-prometheus_2.12 (19.10.0), com.jakehschwartz:finatra-swagger_2.12 (19.10.0) +14 more potentially affected by CVE-2020-35774 via com.twitter:twitter-server_2.12 (19.10.0)

com.twitter:twitter-server2.12 MAVEN version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.twitter:twitter-server2.12 and may be impacted: - com.github.kovszilard:twitter-server-prometheus2.12 19.10.0 - com.jakehschwartz:finatra-swagger2....

CVE-2020-35774

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer aka twitter-server before 20.12.0, in some configurations, allows XSS via the /histograms endpoint...

CVE-2020-35774

Twitter TwitterServer (twitter-server) prior to version 20.12.0 is vulnerable to cross-site scripting via the /histograms endpoint, in configurations using HistogramQueryHandler.scala. The issue arises in the histograms component of the administration panel and could allow an attacker to inject m...

Twitter TwitterServer Cross-Site Script Vulnerability

Twitter TwitterServer is a Scala-based software for building Twitter servers. The software can be used to build a Twitter server through the template, in addition to the server can be managed, monitoring. A cross-site scripting vulnerability exists in Twitter TwitterServer versions prior to 20.12...