CVE-2020-35774: XSS
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TwitterServer (twitter-server)to a version that resolves this vulnerability.Fixed in 20.12.0
Event History
Frequently Asked Questions
What is the severity of CVE-2020-35774?
CVE-2020-35774 is classified as a medium severity vulnerability due to its potential to allow XSS attacks.
How do I fix CVE-2020-35774?
To remediate CVE-2020-35774, upgrade to TwitterServer version 20.12.0 or later.
What type of vulnerability is CVE-2020-35774?
CVE-2020-35774 is an XSS (Cross-Site Scripting) vulnerability that affects the /histograms endpoint.
Which software versions are affected by CVE-2020-35774?
CVE-2020-35774 affects TwitterServer versions prior to 20.12.0.
In what configurations does CVE-2020-35774 occur?
CVE-2020-35774 can occur in specific configurations of the TwitterServer software.