Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server), in some configurations, allows XSS via the /histograms endpoint.
Advisories for Maven/Com.twitter/Twitter-Server_2.12 package
2022