漏洞描述
twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
advisory.checkmarx.nethttps://advisory.checkmarx.net/advisory/CX-2020-4287↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-35774↗github.comhttps://github.com/twitter/twitter-server/commit/e0aeb87e89a6e6c711214ee2de0dd9f6e5f9cb6c↗github.comhttps://github.com/twitter/twitter-server/compare/twitter-server-20.10.0...twitter-server-20.12.0↗github.comhttps://github.com/ARPSyndicate/cvemon↗