Tuesday, December 29, 2020
CVE-2020-35774
nist.gov
In: nist.gov
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint. CVE-2020-35774