CVE-2020-35774
40Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 86%
exploitation probability
86%top 1% of all CVEs
observed exploitation
nono source reports it
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.
Affected products
n/a · n/a