Read the docs

Twitter

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Twitter records in CISA KEV

No Twitter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Twitter Kit 3 records LOW Secure Headers 2 records LOW Groupama Toujours La 1 record LOW Recommendation Algorithm 1 record MEDIUM Twitter 1 record LOW Twitter-server 1 record HIGH

Records

3 records in Twitter Kit · all components

TI-2019-03840 CVE-2019-5431 · GHSA-4588-cpvg-rgr5

Cross-site request forgery in Twitter Kit for iOS

Priority LOW 25

This vulnerability was caused by an incomplete fix to CVE-2017-0911.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00382 Published 2019-05-06 No fix listed CWE-352
TI-2017-00858 CVE-2017-0911 · GHSA-rcwq-7c2v-mc74

Improper authentication in Twitter Kit for iOS

Priority LOW 25

Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials.

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00501 Published 2018-02-09 No fix listed CWE-360
Open these records in search →