CVE-2020-35774
40Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 88%
exploitation probability
88%top 1% of all CVEs
observed exploitation
nono source reports it
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.
Affected products
n/a · n/a