Skip to content
OpenAdvisories

Package · Maven

com.twitter:twitter-server_2.12

1 known vulnerabilities.

1 result · Feed

  • Medium 6.1
    CVE-2020-35774 Scanner template EPSS 86%

    TwitterServer Cross-site Scripting via /histograms endpoint

    server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.