Approved changes feed: RSS · Atom

cpe:2.3:a:twitter:twitter-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTwitter (98f97516-0d10-5b10-bf56-43d6aa195abe)
ProductTwitter Server (36485be3-92f2-52bf-b07b-5e977fd3504b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/twitter/twitter-server purl2cpe 2026-06-01 10:17:58.407327

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35774 vulnerable 2026-06-08 05:25:01.677667 Details available
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.
Published: 2020-12-29T17:54:04.000Z
Updated: 2024-08-04T17:09:15.249Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.