PoC Index

CVE-2020-35774

MEDIUM 6.1EPSS 85.6%

server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.

CVSS v3.1
5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0
3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
EPSS
85.65% chance of exploitation in the next 30 days, 100th percentile
Nuclei
medium · CWE-79
Published
2020-12-29
Updated
2024-08-04

Nuclei templates (1)

References

Related