Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mosesn

#47331of 53,633
5.4Total CVSS
Vulnerabilities · 1
PT-2020-17417
5.4
2020-12-29
Twitter · Twitterserver · CVE-2020-35774
**Name of the Vulnerable Software and Affected Versions** Twitter TwitterServer (aka twitter-server) versions prior to 20.12.0 **Description** The issue allows XSS via the "/histograms" endpoint in certain configurations. **Recommendations** For versions prior to 20.12.0, update to version 20.12.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/histograms" endpoint until the update is applied.